Last updated: 9 August 2026
Who is responsible for your information?
Static Carnival Technologies Limited is the controller responsible for this website. It is registered in England and Wales under company number 17059001. Its registered office is The Old Church, The Green, Melkridge, Haltwhistle, United Kingdom, NE49 0LX.
For a privacy question or to exercise a data-protection right, email graham@staticcarnival.com.
What the course does not do
The course has no user accounts, payment system, comments, contact form or mailing list. It does not use advertising, behavioural profiling, tracking pixels or analytics. Its glossary search runs inside your browser: the search text is not sent to Static Carnival.
Children and young people
This educational course may be used by people under 18. We apply the same privacy-protective design to everyone: the site does not ask for age, create an account or profile, track learning activity, use persuasive advertising or collect precise location.
If you are a young person and contact us, avoid sending information that is not needed for your question. Your data-protection rights belong to you, although a parent, carer or another trusted adult may help you make a request.
Information processed when you visit
The site is delivered through Google Firebase Hosting. Like other web-hosting services, Firebase receives the internet protocol (IP) address and technical request information needed to return a page, maintain security, detect abuse and provide hosting-usage analysis. Firebase states that Hosting retains IP data for a few months. We do not use Google Analytics or combine hosting information with an account or learner profile.
We use this processing because it is necessary for our legitimate interests in publishing, securing and maintaining the course. Those interests do not require us to identify individual readers or track their behaviour.
For customer personal data, Google acts under the Firebase Data Processing and Security Terms. Google also says that it uses certain technical and operational Firebase Service Data under the Google Privacy Policy. Firebase Hosting runs on global Google infrastructure, so processing may take place outside the United Kingdom and European Economic Area.
Information processed when you contact us
If you email us, we receive the information you choose to send, together with your email address and the ordinary technical details of the message. We use it to understand and answer your enquiry, to administer the website and, where necessary, to establish or respond to legal matters.
You are not required by law or contract to contact us or provide this information. If you do not provide a usable contact address, we may be unable to reply.
Our lawful basis is normally our legitimate interest in dealing with genuine correspondence. If you ask us to take steps before entering into a contract, the processing may instead be necessary for those steps. We may also process information where the law requires it.
Email is handled using Google Workspace. We keep ordinary correspondence only for as long as it is reasonably needed for the enquiry, related administration and any applicable legal obligation or dispute. We retain a data-protection complaint record for up to 24 months after closure, unless an ongoing legal or regulatory matter requires longer.
Who receives personal information?
Personal information may be processed by Google as our hosting and email-service provider. We may also disclose information to professional advisers, courts, regulators or public authorities where this is reasonably necessary or legally required. We do not sell personal information and do not provide it to advertisers.
International processing safeguards
Google may process hosting and email information in countries outside the United Kingdom and European Economic Area. The Firebase terms and the Google Cloud Data Processing Addendum describe the transfer mechanisms used where data-protection law restricts a transfer. Depending on the destination and service, these include an applicable adequacy decision or regulation, a recognised data-transfer framework, or contractual clauses with the relevant UK terms.
The linked terms provide the safeguards and information about obtaining them. You may also email graham@staticcarnival.com to ask for further information or a copy relevant to your personal information.
Your rights
Depending on the circumstances, UK data-protection law may give you rights to:
- ask for a copy of your personal information;
- have inaccurate information corrected;
- ask for information to be erased or its use restricted;
- object to processing based on legitimate interests; and
- receive information in a portable form where that right applies.
Your right to object
You have the right to object to our use of your personal information where we rely on legitimate interests. Tell us what processing concerns you and why. We will stop unless there is a compelling lawful reason to continue.
These rights are not absolute. We will explain any lawful reason that prevents us from fulfilling a request. This site does not make decisions about people by automated means and does not use personal information for direct marketing.
Make a data-protection complaint
Email graham@staticcarnival.com and use the subject “Data protection complaint”. Explain what happened, what information is involved and what you would like us to do. Do not include unrelated sensitive information.
We will acknowledge the complaint within 30 days, make appropriate enquiries without undue delay, keep you informed and tell you the outcome without undue delay. You can also complain to the Information Commissioner's Office (ICO). If EU data-protection law applies to your use of the site, you may also have the right to complain to the supervisory authority where you live or work.
External links
The lessons include a small number of links to other websites. Those sites receive information only when you choose to follow a link, and their own privacy notices then apply.
Changes to this notice
We will update this notice before introducing a materially different use of personal information. The date at the top shows when it was last revised.