How Allotment Technology Ltd handles personal data on allotmentology.tech. Written plainly, kept short, and held to the standard we'd want for our own data.
v1.0 (17 June 2026) · Last updated 17 June 2026
Allotment Technology Ltd is the data controller for personal data collected through allotmentology.tech. We decide what data is collected and why.
When the contact / enquiry form is live, and you choose to use it, we collect the information you give us: your name, your email address, and the content of your message.
We do not ask for any special-category data, and we'd ask you not to include anything more sensitive than you need to in a message.
Like almost all websites, our hosting and the routing layer in front of the site automatically generate short-lived technical logs that can include your IP address, browser type and the pages requested. We use these only to keep the site secure, available and working; they are kept for a short period and then deleted. We don't use them to build profiles of, or otherwise track, individual visitors.
We use the information you submit for one purpose: to read and respond to the enquiry you have chosen to send us.
Our lawful basis is legitimate interests under Article 6(1)(f) UK GDPR — specifically, our interest in responding to people who get in touch with us.
Purpose: to respond to enquiries that you initiate by contacting us.
Necessity: handling the name, email and message you send is the minimum needed to reply — there's no less intrusive way to answer an enquiry you've sent us.
Balance: because you have chosen to contact us and would reasonably expect a reply, this processing is limited, expected, and not overridden by your interests, rights or freedoms. You can object to it at any time (see your rights below).
Enquiry data is stored in a self-hosted PostgreSQL database running on our own compute in the EU (Hetzner, Helsinki, Finland).
Encrypted backups are held on a Hetzner Storage Box in Falkenstein, Germany. Both locations are inside the EU.
We keep third parties to a minimum. The organisations that may process enquiry data on our behalf are:
EU hosting and encrypted backups (Finland and Germany).
EU email provider — used to send us notification of your enquiry.
A copy of enquiry emails reaches the founder's inbox (United States). We rely on Google's data-processing terms and the appropriate transfer safeguards (see international transfers).
Our domain registrar (get.tech / Radix) holds domain registration contact data only. It does not receive visitor or enquiry data.
Your enquiry data is stored in the EU. The only transfer outside the UK/EU is the copy of enquiry emails that reaches the founder's Google Workspace inbox in the United States.
That UK-to-US transfer is covered by the appropriate safeguards under UK GDPR — Standard Contractual Clauses together with the UK International Data Transfer Addendum (IDTA), as set out in Google's data-processing terms.
We keep enquiry data only as long as we need it to deal with your enquiry and any follow-up, and we delete or anonymise it within 12 months of the enquiry being closed.
Under UK GDPR you have the right to: access the personal data we hold about you; have it corrected; have it erased; restrict how we use it; object to our use of it (including our legitimate-interests processing); and, where applicable, data portability.
To exercise any of these, contact us at contact@allotmentology.tech. We'll respond within the time the law allows (normally one month).
This website (allotmentology.tech) sets no analytics, advertising or tracking cookies, and uses no third-party analytics on its public pages. We don't track you across the site.
The signed-in workspace area uses a single strictly-necessary cookie to keep you signed in for the length of your session. It is essential to sign-in working and is not used for analytics or tracking.
If you have a concern about how we handle your data, please tell us first at contact@allotmentology.tech — we'd like the chance to put it right.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator, at ico.org.uk.
If we change how we handle personal data, we'll update this notice and revise the version and date below.