From the 25th of May 2018 the GDPR (General Data Protection Regulation) comes into effect, governing how your information is stored and used. This is designed to protect your identity and give you greater control over who knows what about you. Please see the below information for how Compass Rose collects, uses and stores information in compliance with GDPR.
Cookies are small data files downloaded to your device in order to help the website function correctly. This can be information such as the website name and a unique identification number. Some of these cookies are for security purposes (to prevent websites from being hacked for example). Some are only stored for a single browsing session and some are stored for longer. I've included a list of the cookies used on this website below and the reasons for their usage. Please note that cookies do not store information such as name, address etc, they store this information as an alpha numeric code only (e.g. abcde12345)
Website contact form
If you use the websites contact form to get in touch with me the form will collect certain personal information from you, such as name and email address. Without this information it would be difficult for me to respond to you :)
This information is sent to me via secure email. Specifically via 128-bit encryption, through industry standard transport layer security 1.1, and that encrypted data is authenticated by the SHA1 cryptographic hash function and eventually decoded by the ECDHE_RSA key exchange mechanism. No, I have no idea what all of that means either, except to say that your information is passed to me in a safe and secure manner.
The information collected by the contact form is used solely to respond to your enquiry. I do not pass this information onto any other third party or persons. Your information is not sold or shared with others. If this initial contact leads to a working contract between us then the email is stored securely as part of our working agreement, and if not the email is deleted within three months.
Right to see information held about you and right to be forgotten
In compliance with the new GDPR regulations you have a right to request at any time to see what information is being held about you. As noted in the above paragraphs the information I store is very limited, and any personal information will only be collected from you contacting me. The website does not collected personal information or online identifiers other than the cookies listed above. If you do wish to see what information is held about you please contact me at firstname.lastname@example.org.
You also have the "right to be forgotten" - that is to have any information stored about you deleted. As noted any personal information collected via contact forms is stored for a maximum of three months unless we enter into a working contract, in which case this will be covered in our contract. If you wish to have any information stored about you deleted before this three month period please do get in contact.