Privacy notice
This notice explains how this installation of the platform uses personal data. It is written for the UK GDPR and the Data Protection Act 2018. It lists the processing the platform provides on this installation, including processing added by the active theme and by active plugins. It does not describe a service that is switched off.
Who we are
The operator and controller is VeCar Digital Programming. The registered and operational address is 4th Floor Gregs Buildings, 1 Booth Street, Manchester, United Kingdom, M2 4DU. No data protection officer has been appointed.
For a privacy request, use the contact page.
What the platform processes
Visitors also leave technical data that the platform needs in order to run: a session identifier and the form-protection token. The database is stored by the host.
| Activity | Data | Lawful basis | Retention |
|---|---|---|---|
| Accounts | Name, email address and hashed password of a person who has a login. | Contract, UK GDPR article 6(1)(b). | For the life of the account and for twelve months after it is closed. |
| Contact forms | Name, email, phone number if you provide one, subject and message. | Legitimate interests, article 6(1)(f). If the enquiry is about buying a service, article 6(1)(b). | Twenty-four months after the last message. If it becomes part of a contract, for the life of the contract and for six years after it ends. |
| Newsletter | Email address, and the IP address and browser used when you subscribed. | Consent, article 6(1)(a). | Until you unsubscribe, and then for thirty days. |
| Comments | Name, email and the text of a comment left by a signed-in person. | Legitimate interests, article 6(1)(f). | For the life of the content that was commented on, unless deleted sooner. |
| Theme fonts | IP address, sent to Google when the browser downloads the Inter typeface. | Legitimate interests, article 6(1)(f). This is not a statistics cookie. | According to Google's policy for the font request. |
We do not ask for special-category data. Please do not include it in a message. The platform is aimed at businesses and adults. It does not knowingly collect data from children. We do not use personal data for automated decisions that produce legal effects or similarly significant effects.
Who we share it with
We do not sell personal data. We share it with these providers, who act on the operator's instructions unless a row above names a different role:
- The company that hosts the platform, and the email service that delivers messages.
- Google Ireland Limited e Google LLC. They receive the IP address when the theme loads fonts from Google Fonts.
Transfers outside the UK
Where a provider stores or accesses personal data outside the UK, the operator relies on an adequacy regulation or on the International Data Transfer Agreement. Google, where it is used, is certified under the UK Extension to the EU-US Data Privacy Framework for transfers to the United States.
Your rights
You can ask for a copy of your data, to correct it, to delete it, to restrict how it is used, or to receive it in a portable format. You can object to processing based on legitimate interests. Where the platform relies on consent, you can withdraw it at any time. Withdrawal does not affect processing that took place before it. Statistics consent is withdrawn with Change choice in the footer: the banner returns and you can press Reject.
Cookies
Each cookie and each external service is described in the cookie policy.
Complaints
Contact the operator first. You can also complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom, or at ico.org.uk/make-a-complaint.
Changes
The operator publishes any change on this page and the date at the top is updated. Saving the compliance settings rebuilds this page from the platform.