Website privacy notice

What this notice covers

This notice covers the miro-online.co.uk website only. It does not cover the TapSpot product, the TapSpot website at tapspot.link, or the TapSpot mobile applications. Those services collect and use data in order to work, and they are covered by their own separate privacy documentation.

Who is responsible for your data

MIRO ONLINE LIMITED is the data controller for this website. We are a private limited company registered in England and Wales, company number 10188486, with a registered office at 21 Gower Road, Sketty, Swansea, Wales, SA2 9BX, United Kingdom.

You can reach us at contact@miro-online.co.uk or on 01792 414040.

What this website does not do

To be specific about it, this website:

• sets no cookies of any kind
• uses no analytics, tracking or advertising services
• has no contact forms, sign-up forms or logins
• embeds no videos, maps, social media widgets or comments
• loads no fonts, scripts or images from other companies
• does not build a profile of you or share data for marketing

Every file the site needs is served from our own server. Because nothing here stores or reads information on your device beyond what is strictly necessary to deliver the page, we do not show a cookie banner.

Server logs

Like almost every website, our web server keeps an access log. When you request a page, the server records:

• your IP address
• the date and time of the request
• the page or file you requested
• the response the server gave, and the amount of data sent
• your browser's user agent string, and the referring page where your browser sends one

An IP address can count as personal data, so we treat these logs as personal data. We use them only to keep the site running and secure: to see that pages are being served correctly, to diagnose errors, and to identify abuse such as automated attacks. We do not use them to identify individual visitors, and we do not combine them with anything else.

Our lawful basis is legitimate interests (Article 6(1)(f) UK GDPR): specifically, our interest in operating a working, secure website. We consider this proportionate because the data is limited, is not used to profile anyone, and is deleted on a short cycle.

How long we keep it. Access logs are held on our server and rotated automatically. We do not retain them beyond what our hosting configuration keeps for routine operational and security purposes.

Hosting

This website runs on a virtual private server provided by our hosting supplier. That supplier processes server log data on our behalf as part of delivering the service, under contract, and does not use it for any purpose of its own.

If you email or telephone us

If you contact us using the email address or telephone number on this site, we will have whatever you choose to tell us — typically your name, your email address or phone number, and the content of your message.

We use that only to deal with your enquiry and to keep a record of our correspondence. Our lawful basis is legitimate interests (responding to people who contact us), or the performance of a contract where you are a customer or supplier. We keep business correspondence for as long as it is relevant to our relationship with you and any legal or accounting obligations that apply, and then delete it.

Who we share data with

We do not sell your data, and we do not share it for marketing. The only third parties involved in this website are our hosting provider and our email provider, who process data on our behalf so that the site and our mailbox work. We would also disclose data if we were legally required to.

Links to other websites

This site links to tapspot.link and may link to other external sites. Once you follow a link, you are on someone else's website and this notice no longer applies. We would encourage you to read the privacy information on any site you visit.

Your rights

Under UK data protection law you have the right to ask us for a copy of the personal data we hold about you, to have inaccurate data corrected, to have data erased, to restrict or object to how we use it, and to have it transferred to you or another organisation where that applies.

In practice, for this website that will usually mean an email exchange or a server log entry. If you want to make a request, email contact@miro-online.co.uk. We will respond within one month. Be aware that server logs are not indexed by person, so we may need more information from you — such as an approximate date and time — before we can locate anything.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk. We would rather you came to us first so we can put it right.

Changes to this notice

If we change what this website does — for example by adding a contact form or analytics — we will update this notice before or at the same time as making that change, and update the date at the top of the page.