Privacy

Miloshko Liubov trading as Miloliu, at 83 Car Rd, Cumnock KA18 1HL. In the words of the law I am the controller of the personal data described on this page, which means the decisions about it are mine and the responsibility for them is mine.

Write to liu@miloliu.site about anything on this page. There is no data protection officer: one person trading alone is not required to appoint one, and appointing myself would tell you nothing.

All of it comes from you, or from looking after a site you asked me to look after.

• What you write to me. Your name, your email address, the address of your website and whatever you tell me about it. If you use the form on the contact page, that request is put together in your own browser and handed to your own email program: it reaches me as an ordinary email and in no other way.
• Server logs. The company hosting this site records requests to it, which includes IP addresses, in the ordinary way that web servers do. I add nothing to those logs, and I do not use them to count or follow visitors.
• Working details of a site on a plan. Logins and access I have been given, the notes and records of what was done each month, and the backups themselves, which may contain whatever your site holds.
• Invoices and payment records. What was invoiced, when, and whether it was paid.

I do not buy lists, I do not take information about you from anywhere else, and I do not ask for anything I have no use for.

• Answering your enquiry and working out which plan, if any, suits your site.
• Carrying out a plan: backing up, updating, monitoring, making the changes you ask for and writing the record.
• Invoicing you, and keeping the accounts a sole trader has to keep.
• Keeping a history of what was done to your site, so that a problem months later can be traced to what changed.

That is the whole list. Your details are never sold, rented or passed to anybody for their own marketing.

A contract, and the steps before one

Article 6(1)(b) of the UK GDPR. Answering your enquiry, and then carrying out the plan you agreed, cannot be done without your details.

Legitimate interests

Article 6(1)(f). Keeping records of the work done on a site, keeping backups safe, and keeping the emails in which things were agreed. The interest is being able to show what was done and to put right what was not, and it does not override your rights: the information involved is business contact detail and a history of maintenance.

A legal obligation

Article 6(1)(c). Invoices and accounting records are kept because HMRC requires a sole trader to keep them.

Consent is not relied on for any of this, because none of it is optional decoration: it is what doing the work requires.

Only the businesses whose services are needed to run this one, and only for that:

• the company hosting this website, whose servers log requests to it;
• the email provider through which your message reaches me and my reply reaches you;
• the hosting and backup services used for a site on a plan, which are generally the ones you already pay for;
• an accountant, if one is engaged, and HMRC, for the tax records;
• a payment provider, once card payment is connected, for taking payment on their own pages.

These are named by what they do rather than by name because the arrangements for a new business are still being settled. Ask and I will tell you which providers are in use for your site, in writing.

No one else sees any of it unless the law requires me to hand it over.

Some of the providers above may keep data on servers outside the United Kingdom, as most email and hosting companies do. Where that happens, the transfer rests either on the adequacy regulations the United Kingdom has made for that country or on the standard contractual clauses the provider has in place.

I do not deliberately move your information abroad for any purpose of my own, and I will tell you where a particular provider holds it if you ask.

An enquiry that does not become a plan

Twelve months, then deleted. People do come back a year later with the same site.

Emails, records of work and invoices for a plan

For as long as the plan runs, and afterwards for at least five years from the 31 January following the tax year they belong to, which is the period HMRC asks a sole trader to keep business records for.

Logins and access

Removed within 30 days of a plan ending. You can ask for them to be removed sooner.

Backups of your site

Kept while the plan runs, deleted 30 days after it ends.

Server logs of this website

Kept by the hosting company for as long as their own policy says. I do not copy them or keep them myself.

Whatever the outcome, asking is free and I will answer within one month.

• See it. A copy of the personal data I hold about you.
• Correct it. Anything wrong put right.
• Delete it. Erasure of what I am not required to keep. Tax records are the usual exception, and I will say so plainly rather than quietly keeping the lot.
• Restrict it. Ask me to stop using it while a disagreement about it is sorted out.
• Object to it. Where I rely on legitimate interests, you can object and I will stop unless there is a reason that outweighs your objection.
• Take it with you. The details you gave me, in a form another provider can read.
• Withdraw consent. Where consent was the basis for something, though as above it is not the basis for the work itself.

Tell me first, at liu@miloliu.site: most of it is a misunderstanding that one email sorts out, and I would rather know.

You can also complain to the Information Commissioner’s Office, which regulates data protection in the United Kingdom, at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or through their website at ico.org.uk. You do not have to come to me first, and complaining to them costs nothing.

No. Nothing here is compulsory, and nothing about this site requires you to identify yourself to read it.

But an answer needs somewhere to go, so without an email address there is no reply; and a care plan cannot be carried out on a site I have no access to. If you would rather not send details by email at all, write to the postal address and say so.

The date this page was last gone over is printed at the top of it. If something changes that affects how your information is handled, plan customers are told by email rather than left to notice a new date.