Privacy notice

Summary

We collect the minimum information necessary to operate the site and respond to enquiries. We do not run analytics, we do not sell data, and we do not share information with advertising networks. The only cookie we set is a functional one that remembers your theme choice; see the cookies notice for detail.

Who controls your data

Little Rascal is the data controller for personal data collected through this website.

• Registered office: [REGISTERED ADDRESS PENDING]
• ICO registration: [ICO REGISTRATION NUMBER, IF APPLICABLE]
• Contact: hello@little-rascal.uk

What we collect

We collect the following categories of information:

Server access logs

Our web server records the IP address, timestamp, requested URL, HTTP status, user-agent string and referrer for every request. These logs are retained for a short operational window to diagnose faults and defend against abuse.

Contact enquiries

If you email us or complete a contact form, we receive your email address, name (if given), and the content of your message.

Functional cookie

A lr_theme cookie stores your light/dark theme preference. It contains no personal data and is not shared.

We do not knowingly collect information from anyone under 13.

Why we collect it — lawful basis

Under Article 6(1) of the UK GDPR we rely on:

• Legitimate interests (Article 6(1)(f)) — for server access logs, to keep the site operating and secure. We have assessed that this processing is necessary and does not unduly affect your rights.
• Legitimate interests — for responding to enquiries you send us.
• Consent is not required for the theme cookie — it is a strictly necessary functional cookie under Regulation 6(4)(b) of the Privacy and Electronic Communications Regulations (PECR).

How long we keep it

• Server access logs: 30 days, then automatically deleted.
• Contact enquiries: up to 24 months unless our correspondence has ongoing relevance (e.g. an engagement is proceeding).
• Theme cookie: up to 1 year, or until you clear it in your browser.

Where a document is subject to a legal or regulatory retention obligation, we keep it for the period that obligation requires.

Who we share it with

We do not sell personal data. We do not share it with advertisers.

We may share limited information with:

• Our hosting provider (a Synology NAS operated by us in the United Kingdom) — necessary to serve the site.
• Our email provider — to receive and reply to messages you send us.
• Legal or regulatory authorities where we are legally obliged to disclose information.

Any processor we use is bound by a data processing agreement that requires them to protect the data and use it only as instructed.

International transfers

All personal data is processed within the United Kingdom. If this changes we will update this notice and, where required, put appropriate safeguards in place (adequacy decision, international data transfer agreement, or standard contractual clauses).

Your rights

Under the UK GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten"), where the lawful basis allows.
• Restrict processing while a query is investigated.
• Object to processing carried out on the basis of legitimate interests.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, where processing is based on consent.
• Not be subject to a decision based solely on automated processing (we do not carry out such processing).

To exercise any of these rights, email hello@little-rascal.uk. We will respond within one calendar month.

How we protect your data

The site is served over HTTPS with a strict content security policy and modern browser security headers. Application-layer secrets are encrypted using libsodium AEAD. Database storage is encrypted at rest. Access to production systems is restricted and logged.

No security control is absolute. If you believe your data has been compromised, please contact us immediately.

Complaints

If you are unhappy with how we handle your personal data, please contact us first so we have the opportunity to put things right.

You also have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113

Changes to this notice

We may update this notice from time to time. The "Last updated" date at the top of this page reflects the most recent change. If a change materially affects how we process your data we will draw it to your attention.