Privacy & cookies

This notice explains what personal data SkintInOrlando collects, why, and what you can do about it. In short: we don't use cookies or analytics, and we only hold the details you choose to send us.

Last updated: 19 Oct 2026

Who we are

The data controller is Nathan Beal, a sole trader trading as SkintInOrlando. You can contact us about anything on this page at [email protected]. Our full contact details are on the Who runs this site page.

Cookies

This website doesn't set any cookies and doesn't use analytics, advertising or tracking tools, so we don't show a cookie banner. Nothing is stored on your device when you read the site.

The menu photo form uses Cloudflare Turnstile to stop spam (see below). Turnstile works without setting cookies.

If we ever add analytics or anything else that needs non-essential cookies, we'll update this page and ask for your consent first.

When you visit the site

The site is hosted by Cloudflare. As with any website, when your browser asks for a page, Cloudflare's servers receive technical details such as your IP address, browser type and the page requested. Cloudflare uses them to deliver the page and protect the site from attacks. We don't run our own analytics or keep our own visitor logs; Cloudflare may show us anonymous, overall traffic totals. Our lawful basis is legitimate interests: running a secure website. Cloudflare's handling is covered by its privacy policy.

If you email us

What we get: your email address, your name if you include it, and whatever you write.
How: email to [email protected] passes through Cloudflare Email Routing and is delivered to our mailbox with Yahoo.
Why: to reply to you. Our lawful basis is legitimate interests: answering the messages people send us.
How long: we keep emails only as long as we need them to deal with your message, and normally delete them within 12 months.

What we store: your photos, the restaurant, area and date you took them, your first name if you give one, your email if you give one, the time you sent them, and the country your connection came from. Your browser removes location and camera data from photos before they're uploaded, and our server checks again. We don't store your IP address.
Why: to check your photos and, if they're suitable, publish them in our Orlando menus gallery and on our social media pages. Our lawful basis is your consent, which you give by ticking the box on the form. We only use your email if we need to ask you about a photo.
Where: in Cloudflare's storage (Cloudflare Workers KV), on our Cloudflare account.
How long: photos we decide not to publish are deleted when we check them. When we publish a photo, we delete your email address at the same time. Published photos, with the restaurant, area, date and first name if you gave one, stay up until you ask us to remove them.
Spam check: the form uses Cloudflare Turnstile, which looks at technical signals from your browser, such as your IP address and browser type, to tell people from bots. It doesn't read what you type into the form. Our server passes your IP address to Cloudflare for this check but doesn't keep it. Our lawful basis is legitimate interests: keeping spam off the site. See Cloudflare's Turnstile privacy addendum.
Changed your mind? Email [email protected] with the restaurant and date, and we'll take the photo down and delete it and your details. Withdrawing consent doesn't affect anything we published before you asked.

Links to other websites

We link to official sites, sellers and booking sites. Once you click through, that site's own privacy and cookie policy applies, and it may set its own cookies. Some links may become adverts, marked (Ad). If you click one of those, the seller or its affiliate network may use a cookie on their site to record that you came from us, so we can be paid a commission. We never see your booking or payment details. See our affiliate disclosure.

We don't sell your data or share it for marketing. The only companies involved are the ones named above: Cloudflare (hosting, email routing, form storage and spam checks) and Yahoo (our mailbox). Both may process data outside the UK, including in the USA, and use the safeguards UK data protection law requires for international transfers.

Your rights

Under UK data protection law you have the right to:

ask for a copy of the personal data we hold about you
ask us to correct it, or to delete it
ask us to limit how we use it, or object to us using it
withdraw your consent at any time, where we rely on consent (for example, menu photos)
ask for data you gave us in a format you can take elsewhere

To use any of these rights, email [email protected]. It's free, and we'll reply within one month.

How to complain

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint or call 0303 123 1113.

Changes to this notice

If what we collect changes, for example if we start a newsletter, we'll update this page and the date at the top.