Download as PDF
1. Data controller
The data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 is Bad Kitty Software, a sole trader operating in the United Kingdom. Contact may be made via the contact form at badkitty.uk/contact.php.
2. Data collected and legal basis
Bad Kitty Software collects and processes the following personal data:
- Contact form data: name (if provided), email address, and message content. Legal basis: legitimate interests (Article 6(1)(f) UK GDPR) in responding to communications directed to the data controller.
- Server log data: IP addresses, HTTP request data, timestamps, and user agent strings, automatically collected by the hosting provider (Heart Internet) as part of standard web server operation. Legal basis: legitimate interests in the secure and functional operation of the website.
No special category data as defined under Article 9 UK GDPR is collected or processed.
3. Cookies and tracking
This website uses only strictly necessary cookies as defined under the Privacy and Electronic Communications Regulations 2003 (PECR). No cookies are used for analytics, advertising, profiling, or any purpose other than the essential functioning of the website and, where applicable, maintaining authenticated user sessions. No third-party tracking technologies are deployed on this website.
4. Purposes of processing
Personal data collected via the contact form is processed solely for the purpose of responding to the communication. It is not used for marketing, profiling, or any secondary purpose. Server log data is processed solely for the purpose of maintaining the security and operation of the web server.
5. Data sharing and third parties
Personal data is not sold, rented, or otherwise disclosed to third parties for commercial purposes. Website hosting services are provided by Heart Internet, a trading name of Newfold Digital UK Ltd, which processes request data as a data processor on behalf of the data controller in accordance with their data processing agreement. No other third-party processors are used. No data is transferred outside the United Kingdom or the European Economic Area.
6. Retention
Contact form data is retained only for as long as is necessary to handle the relevant communication and any reasonable follow-up period, after which it is deleted. Server log data is retained in accordance with Heart Internet's standard data retention policies. No personal data is retained beyond the period necessary for the stated purpose.
7. Data subject rights
Data subjects have the following rights under UK GDPR, exercisable by contacting the data controller via the contact form:
- The right to be informed (Article 13-14)
- The right of access (Article 15)
- The right to rectification (Article 16)
- The right to erasure (Article 17)
- The right to restriction of processing (Article 18)
- The right to data portability (Article 20)
- The right to object (Article 21)
Requests will be responded to within one calendar month. The data controller reserves the right to verify the identity of the requesting party before fulfilling any request.
8. Complaints
Data subjects who consider that the processing of their personal data infringes UK GDPR have the right to lodge a complaint with the Information Commissioner's Office (ICO), which is the supervisory authority for data protection in the United Kingdom. The ICO can be contacted at ico.org.uk or by telephone on 0303 123 1113.
9. Changes to this policy
This policy may be updated from time to time. The current version is always available at badkitty.uk/privacy.php. Where changes are material, the effective date below will be updated accordingly.
Last updated: May 2026. © 2026 Bad Kitty Software.