Who is responsible for the processing
The controller for the data processed at https://naughtymate.uk is the private, non-commercial operator of the site. Under the UK GDPR and the Data Protection Act 2018, that individual decides how and why your data is processed. You can get in touch through the site's contact form.
Data processors
Your data is not sold or passed on for marketing. Our host, 20i Limited, is bound as a processor under Article 28 of the UK GDPR, without using your data for its own ends. Data is otherwise disclosed only where the law requires.
Purposes and lawful bases
We process data to run the site securely and reply to your enquiries. Processing rests on legitimate interest under Article 6(1)(f) of the UK GDPR, together with your consent where required (Article 6(1)(a)). We never sell or rent your data.
Overseas transfers
Your data is not transferred outside the United Kingdom. Should such a transfer ever be needed, it would be protected by the safeguards required under Chapter V of the UK GDPR, such as an adequacy decision or an International Data Transfer Agreement.
Complaints
If something about your data worries you, please raise it first through the site's contact form. You also have the right to complain to the Information Commissioner's Office (ICO), the supervisory authority for the United Kingdom, at ico.org.uk.
Retention
Data is retained no longer than the purpose requires. Server logs are deleted promptly and form data once the request is dealt with, unless a legal obligation requires longer retention.
Cookies
This site sets only strictly necessary cookies. Advertising or analytics cookies are set only with your consent, as required by PECR, which you can withdraw at any time. You can also refuse cookies through your browser settings.
Data we collect
We collect only the data necessary to handle your request. Sensitive data is not collected.
- Identity: your first name and, where given, your surname.
- Contact: your email address and, where you wish, a phone number.
- Area: the town or postcode you provide.
- Your message: the details you send about sex.
- Connection data: IP address, date and time of the request.
Data security
Data is sent over an encrypted (HTTPS) connection. Access is limited to those who need it, and suitable technical and organisational measures protect against loss, alteration or unauthorised access.
Your data protection rights
The UK GDPR and the Data Protection Act 2018 give you the following rights:
- Right of access: a copy of the data held about you.
- Rectification: correct inaccurate or incomplete data.
- Right to erasure: request deletion.
- Restriction: limit how your data is used.
- Objection: object to how your data is used.
- Portability: receive your data in a reusable format.
- Withdraw consent: at any time, where processing relies on consent.
Access data
On each visit, technical data is logged automatically such as your IP address, a timestamp, the page requested and your browser type. It keeps the service secure and is deleted after a short period.
Updates
We revise this policy if the law or the service changes. The current version here is the one in force.