Privacy Policy

Anastasiia Paziuk trading as Slides Monster decides what happens to information collected through this site and is the controller of it under the UK General Data Protection Regulation and the Data Protection Act 2018. There is no company, so there is no company number to give.

Controller

Anastasiia Paziuk trading as Slides Monster

Address

Flat 5 Alexander Court, 24 Smyth Rd, Bristol BS3 2BL, United Kingdom

Email

contact@slides.monster

Everything in this policy can be asked about at that address, and anything asked there is answered by the person who runs the business rather than by a department.

There are three things, and this is all of them.

What you write in an email

Your name, your email address, whatever you say about your deck and anything you attach to it: a source file, a document, a logo, a set of figures. All of it arrives because you sent it, and none of it is bought, scraped or taken from anywhere else.

What a hosting provider records

Like every website, this one is served by a computer that writes down what it served: an address your internet connection was using, the page asked for, the time, and the browser that asked. Those records are made by the hosting provider rather than by anything on these pages, and they are used to keep the site up and to look into faults and abuse.

What your own browser keeps

One small value, described in the part on cookies and browser storage below. It stays in your browser, on your own machine, and never reaches this business.

There is no analytics, no advertising, no tracking pixel, no embedded video, no social media button, no comment system, no live chat and no font loaded from anybody else's server. The typefaces this site is set in are served from the site itself, which is why opening a page here does not tell a third party that you did.

The request form on the Contact page runs entirely in your own browser. What you type into it is not sent to this website, is not stored on a server and is not seen by anybody while you are typing: there is no server behind these pages that could receive it, because the site is a set of static files.

What the button does is write the request out and hand it to your own email application, with the address and the reference already filled in. Nothing has been sent at that point. Your information reaches this business when you press send in your own email application, and it arrives the same way any other email does.

One consequence is worth saying plainly: filling the form in and never pressing the button leaves this business knowing nothing at all about you.

• Answering your enquiry: reading what you sent, working out what the deck needs and replying to you.
• Carrying out an order: agreeing a running order, laying out your slides, handling your rounds of changes and handing the files over.
• Keeping the records a business has to keep: what was agreed, what was invoiced and what was paid.
• Keeping the site up and dealing with faults and abuse, from the hosting records described above.

Nothing collected here is used to advertise to you, is added to a mailing list, is profiled, or is sold, rented or passed to anybody who wants it for their own purposes.

A contract, and the steps before one

Article 6(1)(b) of the UK GDPR. Answering an enquiry and carrying out an order are both covered by this: one is a step taken at your request before a contract, the other is the contract itself.

A legal obligation

Article 6(1)(c). Records of what was sold and what was paid are kept because tax law requires a self-employed person to keep them.

Legitimate interests

Article 6(1)(f). Two of them, and both are named rather than hinted at: keeping this website available and free of abuse, which is what the hosting records are for, and being able to show what was agreed if a disagreement arises later. Neither overrides your own interests, and you may object to either at the address above.

No special category data is asked for anywhere on this site. If you happen to put some into an email - something about your health, for example, in explaining a deadline - it is used only to answer you and is not recorded separately.

Nobody sees your information because they asked to. It reaches these categories of provider because a business cannot be run without them:

• the hosting provider that serves these pages and holds the server records described above;
• the email provider that carries messages to and from the address on this site;
• the payment provider named in your written confirmation, where an order is paid for. Card details go to them directly and are never held here;
• an accountant or bookkeeper, where one is used to prepare accounts and tax returns;
• anybody the law requires it to be given to, such as HM Revenue and Customs or a court.

These are categories rather than names because the arrangements are not all settled yet. The providers actually used for your order are named in the written confirmation for it, and can be asked about at any time.

This business does not send your information abroad itself. It has no overseas office, no overseas contractor and no overseas storage of its own.

Providers of hosting and email commonly run servers in more than one country, and where one of them stores or handles information outside the United Kingdom, that transfer has to rest on one of the grounds Chapter V of the UK GDPR allows: a country the United Kingdom has found adequate, or a contract on the terms the law requires, such as the International Data Transfer Agreement or the UK Addendum to the standard contractual clauses.

The providers are named in the written confirmation for an order, and which of those grounds each one relies on can be asked about at the address above. Nothing here claims a position that has not been checked.

An enquiry that does not become an order

Twelve months from the last message, and then deleted.

An order

The correspondence and the files for six years from the end of the order, because that is the period in which a claim under a contract can normally still be brought.

Records of what was sold and paid

At least five years after the 31 January submission deadline for the tax year they fall in, which is what HM Revenue and Customs requires of a self-employed person.

Server records at the hosting provider

Thirty days, and then deleted by the provider.

The value in your own browser

Until you clear your browser's site data. It is never held anywhere else.

Your deck itself, and the material you sent for it, are deleted at the end of the retention period above or earlier if you ask for them to be. They are not kept as a portfolio and are not shown to anybody.

• a copy of the information held about you, and to be told what is done with it;
• to have anything wrong about you corrected;
• to have it deleted, where there is no longer a reason to keep it;
• to have its use restricted while something about it is being sorted out;
• to object to its use where that use rests on legitimate interests;
• to have what you gave, where it was given for a contract, sent to you or to somebody else in a machine-readable form;
• to withdraw consent, where anything was ever done on the strength of consent, without that affecting what was done before you withdrew it.

Ask at contact@slides.monster. There is nothing to pay, and an answer comes within one month. Where a request is complicated the month can be extended, and you are told within that first month if it is. Where the request comes from somebody whose identity is not obvious from the correspondence, enough is asked to be sure who is being replied to, and nothing more.

Something gone wrong? Say so at contact@slides.monster and it gets put right. It is the shortest route and the only one that can change how this business actually behaves.

You do not have to come here first, though. You may complain to the Information Commissioner's Office at any time, and doing so takes nothing away from your other rights.

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Their site is ico.org.uk.

Nothing on this site has to be filled in. There is no account to open, no newsletter to join and no gate in front of any page.

Where you want an answer, three things are genuinely needed - a name, an email address and roughly how many slides there are - because without them a reply cannot be addressed or priced. Everything else is optional, and leaving it out means only that the reply asks about it.

Where an order is placed, the information on the written confirmation is needed to carry it out and to keep the records the law requires. Without it there is no way to do the work.

There is no automated decision-making with legal or similarly significant effects, and there is no profiling of any kind. Every reply, figure and decision about an order is made by a person reading what you wrote.

The panel on the Contact page that shows which package a set of counts falls into is arithmetic running in your own browser, not a decision about you: it compares two numbers with the published limits, and the figure is confirmed by a person in writing before anything is agreed.

This site sets no cookies. There is no consent banner because there is nothing to consent to, and there is no separate cookie policy because the law does not require a page of its own for a site that stores nothing of interest.

One value is kept in your browser's local storage by the request form, and it is this:

slidesmonster:request-sequence

A number between 1 and 99. It exists so that two requests written from the same browser do not come out with the same reference. It says nothing about you, is not read by anything else, and never leaves your machine.

Clearing site data for this address in your browser removes it. Blocking storage altogether is fine too: the form notices, carries on and gives the request a reference anyway.

Storing it is covered by regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003, which allows storage strictly necessary for a service the user has asked for. Nothing else is stored, so nothing else needs an exemption.

The date of the current edition is printed at the head of this page, with the details of who the controller is. Where this policy changes, the new edition is published here with a new date.

Where a change materially affects somebody with an order in progress, they are told by email rather than being left to notice the date. Nothing you have already sent is used for a new purpose on the strength of a quietly published edition.