Privacy Policy for shinytinyapps.com

Last Updated: 12 May 2025

1. Introduction

Welcome to Shiny Tiny Apps (https://shinytinyapps.com) (the "Website"). Gregory Sinclair ("we", "us", or "our") is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Website and use our applications or services (collectively, the "Services"). Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site or use our Services.

This policy applies where we are acting as a data controller with respect to the personal data of our Website visitors and Service users; in other words, where we determine the purposes and means of the processing of that personal data.

2. Data Controller Information

The data controller is: Gregory Sinclair Flat 53 Barrington Court, Colney Hatch Lane, London, N10 1QH. info [at] shinytinyapps [dot] com

3. What Personal Data We Collect

We may collect and process the following categories of personal data about you:

  • Identity Data: Name (collected via the contact form).
  • Contact Data: Email address, Telephone number (collected via contact form).
  • Professional Data: Company name (collected via contact form).
  • Enquiry Data: Information provided in the 'Project Brief' field and any other messages submitted via the contact form (which may contain personal data voluntarily provided by the user).
  • Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website (collected via standard web server logs and Google Analytics).
  • Usage Data: Information about how you use our Website, including pages visited, time spent, links clicked, and referring websites (collected via Google Analytics).

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious beliefs, political opinions, trade union membership, information about your health, and genetic and biometric data), nor do we collect any information about criminal convictions and offences.

4. How We Collect Your Data

We use different methods to collect data from and about you including through:

  • Direct interactions: You may give us your Identity, Contact, Professional, and Enquiry data by filling in the contact form or by corresponding with us by post, phone, email or otherwise.
  • Automated technologies or interactions: As you interact with our Website, we automatically collect Technical and Usage Data about your equipment, Browse actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies (including Google Analytics). Please see our Cookie section (Section 10) below for further details.
  • Third parties or publicly available sources: We receive Technical and Usage data from third parties such as analytics providers (Google Analytics).

5. Lawful Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we must have a valid lawful basis to process your personal data. We rely on the following lawful bases:

  • Consent: Where you have given us clear consent to process your personal data for a specific purpose (e.g., consenting to non-essential cookies via our cookie banner). You can withdraw consent at any time.
  • Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, provided your interests and fundamental rights do not override those interests. We use legitimate interests for purposes such as:
    • Analysing website usage (via Google Analytics) to improve the Website and Services.
    • Responding to enquiries submitted via the contact form.
    • Ensuring the security and proper functioning of the website (e.g., through server logs and security services like Cloudflare).

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

6. How We Use Your Personal Data

We use the information we collect or receive:

  • To provide, operate, and maintain our Website.
  • To improve, personalize, and expand our Website.
  • To understand and analyse how you use our Website (via Google Analytics).
  • To communicate with you (specifically to respond to enquiries submitted via the contact form).
  • To find and prevent fraud or security issues.
  • For compliance with legal obligations or enforcing our Terms and Conditions.

(Note: We do not currently use your personal data for direct marketing purposes.)

7. How We Share Your Personal Data

We do not sell your personal data. We may share your information in the following situations:

  • With Service Providers: We may share your personal data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. These include:
    • Website Hosting and Security Provider (Cloudflare)
    • Analytics Provider (Google Analytics) We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
  • For Legal Reasons: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.
  • To Protect Rights: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.
  • Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • With Your Consent: We may disclose your personal data for any other purpose with your consent.

8. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

9. Data Security

We have put in place appropriate technical and organizational security measures designed to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered, or disclosed (e.g., using SSL encryption, security services provided by Cloudflare, and limiting internal access).

However, please remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

10. Cookies and Similar Technologies

Our Website uses cookies and similar tracking technologies (like web beacons and pixels) to access or store information.

  • What are Cookies? Cookies are small text files placed on your device to store data that can be recalled by a web server in the domain that placed the cookie.
  • How We Use Cookies: We use cookies to ensure essential website functionality (e.g., security features provided by Cloudflare) and to compile aggregate data about site traffic and site interactions using analytics (Google Analytics) in order to offer better site experiences and tools in the future.
  • Types of Cookies We Use:
    • Strictly Necessary Cookies: These are required for the operation of our website (e.g., security, network management).
    • Performance/Analytics Cookies: These allow us to recognise and count the number of visitors and see how visitors move around our website when they are using it (e.g., Google Analytics cookies). This helps us improve the way our website works.
  • Your Choices: When you first visit our Website, you will be presented with a cookie banner requesting your consent for non-essential cookies (like those used by Google Analytics). You can manage your cookie preferences at any time via the cookie banner settings link or through your browser settings. Blocking some types of cookies may impact your experience of the site and the services we are able to offer. (Note: You need to implement a cookie consent banner tool on your website).

11. Your Data Protection Rights under UK GDPR

Under data protection law, you have rights including:

  • Right of access: You have the right to ask us for copies of your personal information.
  • Right to rectification: You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
  • Right to erasure: You have the right to ask us to erase your personal information in certain circumstances.
  • Right to restrict processing: You have the right to ask us to restrict the processing of your personal information in certain circumstances.
  • Right to object to processing: You have the right to object to the processing of your personal information in certain circumstances (e.g., where we are relying on legitimate interests).
  • Right to data portability: You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
  • Right to withdraw consent: Where we rely on consent as our lawful basis (e.g., for non-essential cookies), you have the right to withdraw that consent at any time.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at info [at] shinytinyapps [dot] com or Flat 53 Barrington Court, Colney Hatch Lane, London, N10 1QH if you wish to make a request.

12. International Data Transfers

Some of our external third-party service providers (specifically Cloudflare and Google Analytics) are based outside the UK or use global infrastructure, so their processing of your personal data will involve a transfer of data outside the UK (often to the USA).

Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring adequate safeguards are implemented. This typically involves using specific contracts approved for use in the UK (such as Standard Contractual Clauses with the UK Addendum) which give personal data the same protection it has in the UK, or transferring data to countries that have been deemed to provide an adequate level of protection for personal data by the relevant authorities.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.

13. Children's Privacy

Our Website and Services are not intended for children under the age of 18, and we do not knowingly collect personal data from children under that age. If we become aware that we have collected personal data from a child under 18 without verification of parental consent (where required), we will take steps to remove that information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date and the updated version will be effective as soon as it is accessible. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

15. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us at info [at] shinytinyapps [dot] com or Flat 53 Barrington Court, Colney Hatch Lane, London, N10 1QH.

You also have the right to lodge a complaint with the UK's supervisory authority for data protection issues, the Information Commissioner's Office (ICO).

Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Helpline number: 0303 123 1113 ICO website: https://www.ico.org.uk

We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.