Privacy Policy
01 Who we are
This website (n54.uk) is operated by Paul McCann, a private individual operating N54 as a non-commercial, private mail infrastructure project based in the United Kingdom.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), Paul McCann is the data controller.
As a non-commercial private operator, Paul McCann does not carry on a trade, business, or profession in connection with this service and may be exempt from the ICO's data protection fee under the Data Protection (Charges and Information) Regulations 2018. Regardless of fee status, this service is operated in full compliance with UK GDPR and the DPA 2018.
Contact for all data matters:
Email: privacy@n54.uk
02 Data we collect
We collect personal data only when you voluntarily submit the contact form on this website. No account registration, cookies that track you, or analytics are used.
| Data | Required? | Why collected |
|---|---|---|
| Full name | Yes | To address your enquiry correctly |
| Email address | Yes | To reply to your message |
| Subject & message | Yes | To understand and respond to your enquiry |
| Mobile / phone number | No — optional | To contact you by SMS if you have opted in to SMS marketing |
| SMS marketing consent | No — optional | Records whether you agreed to receive SMS messages |
| GDPR consent flag | No — optional | Records whether you explicitly consented to data storage under GDPR |
We do not collect payment data, special-category data (health, ethnicity, religion etc.), or data about children. We do not use automated profiling or decision-making that produces legal effects.
03 How we use your data & legal basis
Under UK GDPR, we must have a valid legal basis for each use. The table below sets this out.
| Purpose | Legal basis (UK GDPR Article 6) |
|---|---|
| Handling and responding to your enquiry | Legitimate interests (Art 6(1)(f)) — we have a legitimate interest in communicating with people who contact us. This does not override your interests or rights. |
| Sending you SMS marketing messages (only if opted in) | Consent (Art 6(1)(a)) — you explicitly tick the SMS opt-in box. You may withdraw this consent at any time (see Section 4). |
| Storing a record of your consent preferences | Legal obligation / legitimate interests — maintaining evidence of consent is required to demonstrate compliance with the UK GDPR. |
04 SMS marketing
If you provide your mobile number and tick the SMS marketing opt-in, we may send you occasional messages about N54 services, offers, and updates.
You can opt out at any time by replying STOP to any SMS we send, or by emailing privacy@n54.uk requesting removal from our SMS list. We will action opt-out requests within 5 working days.
SMS messages are sent via a third-party messaging providerUPDATE: name your provider, e.g. Twilio, AWS SNS. That provider processes your mobile number on our behalf as a data processor, under a Data Processing Agreement.
We will never sell your mobile number or share it with any third party for their own marketing purposes.
05 Who we share your data with
We do not sell, rent, or trade your personal data. We share it only where strictly necessary:
- SMS provider — your mobile number if you opted in to SMS, processed on our behalf under a Data Processing Agreement. UPDATE: name provider
- Hosting provider — N54 runs on dedicated server infrastructure. The hosting provider has no access to application-level data under our contract.
- Legal obligation — we may disclose data to law enforcement or regulatory bodies where required by UK law.
No other third parties receive your personal data.
06 International transfers
Your personal data is stored on servers located in the United Kingdom or the European Economic Area (EEA). We do not transfer personal data to countries outside the UK/EEA unless appropriate safeguards are in place (e.g. UK adequacy decisions or Standard Contractual Clauses).
If you opt in to SMS and your provider routes messages through infrastructure outside the UK/EEA, we ensure that provider complies with UK GDPR transfer requirements.
07 How long we keep your data
| Data | Retention period |
|---|---|
| Contact form submissions (name, email, message) | Up to 24 months from submission, then securely deleted unless we have an ongoing business relationship. |
| Mobile number & SMS consent record | Until you withdraw your SMS consent, plus a short period (up to 90 days) to maintain evidence of the opt-out. |
| GDPR consent records | Up to 3 years to demonstrate compliance (ICO guidance on consent records). |
After retention periods expire, data is securely and permanently deleted from all systems.
08 Your rights
Under UK GDPR you have the following rights. These are free of charge and we will respond within one calendar month.
- Right of access — request a copy of your personal data (Subject Access Request).
- Right to rectification — request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten") — request deletion of your data, where no overriding legal ground exists for us to retain it.
- Right to restriction — request that we limit how we use your data in certain circumstances.
- Right to data portability — receive a copy of data you provided to us in a commonly-used, machine-readable format.
- Right to object — object to processing based on legitimate interests; we must stop unless we have compelling legitimate grounds.
- Right to withdraw consent — where processing is based on consent (e.g. SMS), you may withdraw at any time without affecting the lawfulness of prior processing.
- Rights related to automated decision-making — we do not use automated profiling that produces legal or significant effects, so this right is not typically engaged.
To exercise any right, email privacy@n54.uk with the subject line "Data Rights Request". We may ask you to verify your identity before acting on the request.
09 Cookies & technical data
This website does not use cookies, tracking pixels, analytics scripts (Google Analytics, etc.), or any form of persistent client-side storage beyond what is strictly necessary to serve the page.
Standard web server logs may record your IP address, browser type, and the URL requested. These logs are used solely for security and operational purposes, retained for a maximum of 30 days, and not linked to any personal identity.
10 Changes to this policy
We may update this privacy policy from time to time. Where changes are material, we will update the "Last updated" date at the top of this page. We recommend checking back periodically.
The current version always supersedes any prior versions. Continued use of our contact form after a material change constitutes acknowledgement of the updated policy.
11 Contact & complaints
For any privacy or data protection queries, or to exercise your rights:
Email: privacy@n54.uk
Post: Paul McCann, Cursus House, Brampton Lane, Portsmouth, PO3 5TB
If you are not satisfied with our response, or believe we are processing your data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would, however, appreciate the chance to address your concerns before you contact the ICO. Please reach out to us first.