Privacy Policy

Only what the contact form asks for: full name, phone number and email address. We do not ask for identity documents, financial account details or payment information, and you should never send them to us.

Our hosting provider records standard server data such as IP address, browser type and the pages requested. That data is used to keep the site running and to detect abuse.

Your details are used for one purpose: to answer the request you sent. That is a legitimate interest under Article 6(1)(f) of the GDPR, and where you have ticked a consent box it also rests on Article 6(1)(a).

We do not build marketing profiles, we do not sell contact data, and we do not pass it to third party advertisers.

Contact form submissions are retained for 12 months after the last message in the thread, then deleted. Server logs are kept for 30 days. If you ask us to delete your record sooner, we do it and confirm in writing.

Access is limited to the editorial staff answering enquiries. Our hosting and email providers process data on our behalf under contract and cannot use it for their own purposes. We do not transfer personal data outside the EEA or Switzerland without an adequacy decision or standard contractual clauses in place.

You can ask for access, correction, deletion, restriction of processing, portability, and you can object to processing based on legitimate interest. Write to [email protected] and we respond within 30 days. If the answer does not satisfy you, you may complain to your national data protection authority.

The site is served over HTTPS. Submissions are transmitted encrypted and stored on access controlled systems. No system is perfect, and we will notify affected users and the competent authority if a breach creates a risk to your rights.

If this policy changes materially, the updated date at the top changes with it and the previous version stays available on request.