Privacy Policy

1. Data Controller Identification

The data controller responsible for the operational processing of personal information across this service is Zippies Roster Bench Ltd, registered at 48 Foundry Quarter, Highfield Road, Sheffield, S2 4BF, United Kingdom. Any regulatory correspondence or subject access requests should be dispatched to [email protected].

2. Scope of Collected Information

We restrict data collection to technical telemetric indicators and voluntary contact submissions necessary for delivering static web resources securely:

• Network and Device Telemetry: Anonymised IP addresses, browser agent classifications, operating system versions, referring URLs, and resource latency logs collected by our origin hosting infrastructure.
• Direct Communication Records: Names, electronic mail addresses, and contextual message bodies submitted explicitly via our technical contact form.
• Persistent Browser State: Minimal storage keys recorded in local storage to preserve cookie consent preferences across recurring sessions.

3. Lawful Grounds for Processing

Under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, data operations rely on the following lawful justifications:

• Legitimate Interests: Analysis of server access logs to guarantee system uptime, deter distributed denial of service activity, and rectify software anomalies.
• Contractual Performance: Processing contact details to formulate and deliver responses to specific inquiries submitted by visitors.
• Express Consent: Setting non-essential telemetric or analytical browser cookies, obtained via our consent interface.

4. Data Retention and Third-Party Processors

Server access logs are retained on rotating infrastructure buffers for a duration not exceeding 90 days, after which records are aggregated or permanently purged. Contact inquiries and correspondence histories are stored securely for 24 months to satisfy commercial administrative continuity, after which they are erased.

We do not sell, rent, or lease visitor personal data to commercial data brokers. Infrastructure processors include web hosting providers, cloud routing networks, and mail delivery services bound by strict contractual data processing agreements that prohibit independent exploitation of visitor records.

5. International Transfers and Statutory Rights

Where personal data is routed or stored outside the United Kingdom or European Economic Area, transfers occur under approved adequacy regulations or Standard Contractual Clauses guaranteeing equivalent data protection rights. Under the UK GDPR, European GDPR, and applicable United States privacy statutes (including the CCPA), visitors possess unambiguous statutory entitlements:

• The right to request confirmation of and access to collected personal records.
• The right to demand rectification of inaccurate or outdated personal files.
• The right to demand complete erasure ("right to be forgotten") where lawful retention mandates have expired.
• The right to restrict or lodge formal objections against ongoing data processing.
• The right to lodge an administrative grievance with the UK Information Commissioner's Office (ICO).