Who is responsible
The controller for the data processed at https://crushnight.uk is a private individual who runs the site on a non-commercial basis. You can get in touch through the site's contact form.
Your data protection rights
The UK GDPR and the Data Protection Act 2018 give you the following rights:
- Access: obtain your data.
- Rectification: fix data that is wrong.
- Erasure: ask for your data to be deleted.
- Restriction: restrict processing.
- Objection: object to how your data is used.
- Right to data portability: receive your data in a reusable format.
- Right to withdraw consent: whenever processing is based on consent.
These rights can be exercised through the site's contact form. If you are not satisfied, you have the right to complain to the Information Commissioner's Office (ICO), the supervisory authority for the United Kingdom, at ico.org.uk.
Why your data is processed
We process data to run the site securely and reply to your enquiries. The lawful basis is legitimate interest in the secure operation of the site (Article 6(1)(f) of the UK GDPR), together with your consent where required (Article 6(1)(a)).
Updates
This policy is updated when the law or the service changes. The current version here is the one in force.
Cookies
Only cookies needed for the site to work are used. Under the Privacy and Electronic Communications Regulations (PECR), advertising or analytics cookies are set only with your consent, which you can withdraw at any time. You can also refuse cookies through your browser settings.
International transfers
Your data is not transferred outside the United Kingdom. Should such a transfer ever be needed, it would be protected by the safeguards required under Chapter V of the UK GDPR, for example an adequacy decision or an International Data Transfer Agreement.
Personal data collected
Only the data needed to deal with your request is collected. No special category data, as defined by the UK GDPR, is requested.
- Identity: your first name and, where given, your surname.
- Contact: an email address and, optionally, a telephone number.
- Location: the town or postcode you provide.
- Request: what you tell us in your message.
- Technical data: IP address, date and time of the request.
Recipients
Your data is neither sold nor shared for marketing. The host, 20i Limited, acts as a processor on our instructions under Article 28 of the UK GDPR, and does not use your data for its own purposes.
How long data is kept
Data is retained no longer than the purpose requires. Server logs are deleted promptly and form data once the request is dealt with, unless a legal obligation requires longer retention.