Privacy Policy – Katanaspin

This privacy policy explains how Katanaspin collects, uses and protects your personal information when you visit whizzbangpop.co.uk. We take your privacy seriously and handle your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You have rights over your information, and this page tells you what they are and how to use them.
Who controls your data
Whizzbangpop.co.uk is the data controller for any personal information you provide through this site. We decide how your data is processed and for what purpose. If you have questions about how we handle your information, contact us at [email protected].
What information we collect
We collect two kinds of data: information you give us directly, and technical data your browser sends automatically.
Information you provide: When you fill in a contact form or sign up for updates, we collect your email address and any other details you choose to include in your message. We do not collect payment details, account credentials or identity documents – those belong to the operator if you register with them, not to this portal.
Technical data: When you visit the site, your browser sends us your IP address, the pages you view, how long you stay, the device and browser type you use, and the site you came from. We collect this through cookies and similar tracking technologies – see our Cookie Policy for the full list.
Why we process your data
We use the information we collect for three purposes. First, to respond to your enquiries – if you contact us by email, we need your address to reply. Second, to improve the site – we analyse traffic patterns to understand which pages are useful and which need work. Third, to comply with legal obligations, including keeping records where the law requires it.
We do not use your data to send marketing emails unless you explicitly opt in, and you can withdraw that consent at any time.
Our lawful basis
Under UK GDPR, every use of personal data must have a lawful basis. Ours are: consent (when you submit a form or accept optional cookies), legitimate interests (analysing site traffic to improve our content), and legal obligation (keeping records where required by law). Where we rely on legitimate interests, your rights and our reasons are balanced – you can object, and we explain the outcome.
Who else sees your information
We share your data with a small number of third parties, and only when necessary. Our hosting provider stores the site's files and databases, which means they process your IP address and the pages you request. Our analytics provider (if we use one) receives anonymised usage data to generate traffic reports. Advertising partners may place cookies to show relevant ads, but they do not receive your email address or contact-form content.
We never sell your data. No third party receives your information for their own marketing purposes. Any processor we use is bound by contract to handle your data only as we instruct, and to protect it with appropriate security.
Your rights under UK GDPR
You have eight rights over your personal data, and you can exercise any of them by contacting us.
- Access: request a copy of the personal data we hold about you.
- Rectification: ask us to correct information that is inaccurate or incomplete.
- Erasure: request deletion of your data when we no longer have a legitimate reason to keep it.
- Restriction: ask us to stop processing your data while a dispute is resolved.
- Portability: receive your data in a structured, machine-readable format, or have it transferred to another controller.
- Objection: object to processing based on legitimate interests, or to direct marketing.
- Withdraw consent: where processing relies on consent, withdraw it at any time (this does not affect processing that happened before you withdrew).
- Automated decisions: challenge any decision made solely by automated means that significantly affects you (we do not currently make such decisions).
How to exercise your rights
Email [email protected] with your request. We respond within one month, and there is no charge unless your request is manifestly unfounded or excessive. If we cannot comply – for example, if we are required by law to retain certain records – we explain why.
If you believe we have mishandled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. Visit ico.org.uk or call their helpline on 0303 123 1113.
How long we keep your data
We retain your information only as long as necessary for the purpose it was collected. Contact-form submissions are kept for two years, then deleted. Technical logs and analytics data are anonymised after six months. Where the law requires us to keep records for a specific period, we follow that requirement and delete the data once it expires.
Protecting children
This site is intended for users aged 18 and over (18+). We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has provided us with information, contact [email protected] and we will delete it promptly.
Security measures
We protect your data with industry-standard security measures, including encrypted connections (HTTPS), restricted access to personal information, and regular reviews of our processes. No method of transmission over the internet is completely secure, but we take every reasonable step to prevent unauthorised access, disclosure or loss.
Changes to this policy
We review this privacy policy regularly and update it when our practices change or the law requires it. The date below shows when it was last revised. Significant changes are highlighted at the top of the page for 30 days.
Last updated: 6 January 2026
Access to this site is restricted to persons aged 18 and over (18+). If you need support with your data rights or have concerns about how your information is handled, free and confidential guidance is available at ico.org.uk.



























