DATA PRIVACY POLICY
Privacy Notice (EN – UK GDPR)
# Privacy Notice (UK) **Last updated:** 13 January 2026
This Privacy Notice explains how we process personal data when you use **bugslock.co.uk/bugslock.at**.
For users in the UK, we follow the **UK GDPR** and the **Data Protection Act 2018**. Cookie rules also fall under **PECR**.
## 1. Controller
BUGSLOCK LIMITED
483 Green Lanes London – N13 4BS
T: +442035981030
F: +442035981031
E-Mail: info[at]bugslock.co.uk
**Data Protection Officer (DPO):** Thomas Thonhofer
Contact: info(@)bugslock.co.uk (subject: “Data Protection – FAO Thomas Thonhofer”)
## 2. Legal bases
We process personal data based on:
– **Legitimate interests** (e.g. secure operation of the website)
– **Consent** (e.g. analytics and embedded maps)
– **Contract / pre-contract steps** (e.g. responding to enquiries)
– **Legal obligation** (where applicable)
## 3. Hosting (Hetzner) and server logs
Our website is hosted by **Hetzner Online GmbH** (Germany).
When you access the site, server logs may process:
– IP address (or necessary connection data)
– date/time, pages/files accessed, status codes
– referrer URL
– browser/device information
**Purpose:** website delivery, stability, troubleshooting, and security.
**Legal basis:** legitimate interests.
**Retention:** only as long as necessary for the stated purposes (longer if needed to investigate security incidents).
We have an appropriate data processing arrangement in place with our hosting provider.
## 4. Cookies, consent and your choices (PECR)
We use cookies / similar technologies in the following categories:
– **Strictly necessary** (essential for the service)
– **Analytics** (Google Analytics – only with consent)
– **External media** (Google Maps – only with consent)
Non-essential cookies (including analytics) will not be used unless you actively consent.
You can change your choices or withdraw consent at any time.
## 5. Google Analytics 4
We use **Google Analytics 4** to understand how the site is used and to improve it.
**Provider:** Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
**Purpose:** analytics / statistics and website improvement.
**Typical data processed:**
– usage and interaction data (e.g. page views, clicks, time on site)
– device/browser data
– coarse location derived from technical data
– cookie/device identifiers
**Legal basis:** consent. Analytics only runs after you opt in to “Analytics/Statistics”.
**IP addresses:** GA4 does not log IP addresses. For EU-based traffic, IP data is used only to derive coarse geo-location and is then discarded.
**Retention:** event data is retained for up to **14 months** (standard GA4 options).
If **Google Signals** is enabled, Google states the maximum retention for Google-signals data is **26 months**.
To learn more: Google Privacy Policy: https://policies.google.com/privacy
## 6. Google Maps
We embed **Google Maps** to display interactive maps.
**Provider:** Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When the map loads, your browser connects to Google servers. This may involve processing your IP address, device/browser information and usage data (e.g. map views and interactions).
**Legal basis:** consent. Google Maps loads only after you opt in to “External media” (or you actively enable the map).
Google Privacy Policy: https://policies.google.com/privacy
## 7. International transfers (e.g. US)
Use of Google services may involve processing outside the UK/EEA (including the US).
Where required, transfers may rely on the **UK Extension to the EU–US Data Privacy Framework (UK–US Data Bridge)** (where the recipient is certified) and/or other appropriate safeguards (e.g. contractual protections).
## 8. Your rights (UK)
Depending on the circumstances, you may have rights to:
– access your data, rectify it, erase it,
– restrict processing, object to processing,
– data portability,
– and to withdraw consent at any time (where processing is based on consent).
## 9. Complaints (UK supervisory authority)
If you are in the UK, you can complain to the **Information Commissioner’s Office (ICO)**:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
Telephone: 0303 123 1113
Website: https://ico.org.uk
## 10. Changes
We may update this notice if our processing changes or the law requires it.