Privacy Policy

1. Data Controller Identification

This Privacy Policy explains how Sprygo Clips Archive Ltd ("Company", "we", "our", or "us") processes personal data when you visit sprygoclipsarchv.cfd or interact with our hardware research repositories, technical forms, and communication channels.

We operate as the Data Controller in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

2. Personal Data We Collect

We adhere strictly to the principle of data minimization. The categories of information processed are limited to:

• Technical Server Logs: Internet Protocol (IP) addresses, user-agent strings, HTTP referrers, request timestamps, and transport routing data gathered automatically for infrastructure security and rate-limiting purposes.
• Inquiry Transmissions: Full name or handle, email address, topic subject area, and the narrative message details submitted through our engineering desk contact form.
• Client-Side Storage Flags: Pseudonymous preference values stored in your local browser storage (e.g. cookie consent state) to honor your technical interface selections without cross-site tracking.

3. Legal Grounds for Processing

Our lawful bases for collecting and processing personal data under Article 6 of the UK GDPR include:

• Legitimate Interests (Art. 6(1)(f)): Maintaining server perimeter security, mitigating automated denial-of-service attacks, and ensuring accurate technical delivery of our archive materials.
• Performance of Pre-contractual or Advisory Steps (Art. 6(1)(b)): Responding to voluntary inquiries and technical verification requests submitted through our contact forms.
• Consent (Art. 6(1)(a)): Running non-essential browser telemetry or performance cookies, which you may grant, deny, or revoke at any time via our Cookie Policy banner.

4. Data Sharing and Third-Party Infrastructure

We do not sell, rent, lease, or monetize your personal information to marketing syndicates, ad brokers, or data brokers. Data transfers are strictly limited to technical service providers operating under enforceable Data Processing Agreements (DPAs):

• Cloud content delivery network (CDN) operators and edge reverse proxies for DDoS mitigation and DNS routing.
• Transactional email relay systems used to deliver customer inquiries to our engineering desk.
• UK regulatory authorities, law enforcement agencies, or courts when legally compelled by statutory mandate or court order.

5. International Transfers

Whenever data routing traverses outside the United Kingdom or the European Economic Area (EEA), such transfers are governed by UK International Data Transfer Agreements (IDTA) or the UK Addendum to EU Standard Contractual Clauses (SCCs), ensuring equivalent protection standards.

6. Data Retention Schedule

Technical server log files are overwritten or expunged within thirty (30) days unless active forensic investigation of a security threat mandates preservation. Direct correspondence submitted via the contact form is retained for up to twelve (12) months following resolution to facilitate continuity in ongoing hardware research cases.

7. Statutory Rights Under UK GDPR

Subject to statutory conditions, you possess the following rights regarding your personal data:

• Right of Access: Request confirmation and copies of personal data maintained about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure ('Right to be Forgotten'): Request deletion of your data when retention grounds have expired.
• Right to Restriction of Processing: Request suspension of processing under disputed accuracy.
• Right to Object: Object to processing justified solely by legitimate interest grounds.

To exercise any of these rights, submit your request to [email protected]. You also maintain the right to lodge a formal complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Security Safeguards

We enforce modern cryptographic standards across all transmission boundaries, including mandatory Transport Layer Security (TLS 1.3), Content Security Policies (CSP), subresource integrity checks, and static hosting architectures that minimize vulnerability surfaces.