Legal
Privacy.
This page is blocked on something structural rather than on drafting: there is no data controller.
A privacy notice must identify the party responsible for the personal data it describes. There is no registered company here, and the manager will not be named publicly.
This blocks the enquiry form, not only this page. The form cannot go live before this page can.
01What this site loads
No third party is contacted.
Nothing on this site contacts a third party. The only items stored are the two listed below, both of which are needed for the site to work.
| mmf-bootedSession storage. Stops the opening animation repeating. Cleared when the tab closes | Strictly necessary |
|---|---|
| mmf-consentLocal storage. Records your cookie choice so you are not asked again | Strictly necessary |
Change your choice at any time:
Naming a processor is not the same as having a lawful basis for using one. Everything below still has to be answered before any of this may run.
02What has to be resolved, in order
Who is the controller, and can they be named?
There is no registered company, so the controller would be a named individual — and the manager will not be named publicly. Those two facts are in direct tension, and the tension is not resolvable by writing. Either an entity is formed to act as controller, or a representative is appointed, or the site cannot lawfully collect personal data in the relevant territories. This is a decision about the business, not about the website.
Which regime applies
Determined by the manager’s jurisdiction of residence, the site’s target market and its language. None of the three has been established.
Lawful basis for processing enquiry-form data
The form collects a name, an email address and a country of residence. Each needs a stated basis.
Retention period for enquiries that do not convert
How long the data is kept, and what happens to it at the end of that period.
Processors used, and where data is transferred
Form host, email provider, analytics — each is a processor and each transfer needs to be accounted for.
Data-subject rights and the route to exercise them
Which rights apply, and the address a request is sent to.
Cookie and analytics consent
What the applicable regime requires before anything non-essential is set.