1. What we collect
This is a publishing site with no user accounts. The personal data we may handle falls into three groups. First, information you send us: if you use the contact form, it opens your own email application with your name, email address, chosen topic and message, and that email arrives at [email protected]. Second, technical data generated automatically by our hosting provider when you load a page, such as your IP address, browser type, the pages requested and the time of the request, held in server logs. Third, data from cookies or similar storage, described in the next section and in more detail in the cookie policy.
2. Cookies and local storage
The site stores your cookie choice in your browser's local storage so that the banner does not reappear on every page. If you accept analytics cookies, page-view measurement may be enabled; if you accept functional cookies, the site may remember settings such as details you have entered in the contact form. Rejecting non-essential cookies leaves only the storage needed for the site to work. You can change your choice at any time by clearing your browser's site data, which brings the banner back.
3. Why we process data, and on what basis
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 we rely on the following lawful bases. For replying to your enquiry: our legitimate interest in responding to people who write to us, and where relevant the performance of steps you have asked us to take. For server logs: our legitimate interest in keeping the site secure and available. For analytics and functional cookies: your consent, which you give or withhold through the banner. For dealing with a legal request or complaint: our legal obligations.
4. Processors and sharing
We do not sell personal data and we do not share it with advertisers. Data is handled on our behalf by a small number of processors: the hosting provider that serves the site and holds its server logs, the email provider that receives and stores messages sent to our contact address, and, only where you have consented, an analytics provider that measures page use in aggregated form. Each processor acts under a written contract that limits it to our instructions. Where a processor stores data outside the United Kingdom, transfers rely on the UK's adequacy regulations or the International Data Transfer Agreement issued by the Information Commissioner's Office.
5. Visitors in the EU/EEA and California
If you are in the European Union or European Economic Area, the EU GDPR applies to our processing of your data, and you have the rights listed below, which you may also raise with your national supervisory authority. If you are a California resident, the California Consumer Privacy Act as amended gives you the right to know what personal information we hold about you, to request its deletion, to correct it, and to opt out of any sale or sharing of personal information. We do not sell or share personal information within the meaning of that Act.
6. How long we keep data
Emails to our contact address are kept for up to 24 months from the last exchange so that we can follow up on corrections and answer any related questions, then deleted. Server logs are retained by our hosting provider for up to 90 days. Analytics data, where you have consented, is held in aggregated form for up to 26 months. Your cookie choice remains in your browser until you clear it.
7. Your rights
You may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, object to our processing or ask us to restrict it, and ask for it to be provided in a portable format. Where processing rests on consent, you may withdraw that consent at any time without affecting what was done before. To exercise any of these rights, email [email protected] with "Privacy request" in the subject line. We aim to respond within one month. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk.
8. Children
The site is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has sent us personal information, contact us and we will delete it.
9. Changes to this policy
We may update this policy when our practices or the law change. The current version is always the one published at this address, and material changes will be flagged on the home page for a reasonable period.