Privacy Policy
What we collect, why, how long we keep it, and how to make us delete it.
This document is an unreviewed draft. Every [BRACKETED] value is a placeholder that must be completed, and the whole thing needs a lawyer qualified in your jurisdiction before it is published. Do not rely on it as it stands.
What we collect
We do not sell personal data. We do not operate a login. We do not build advertising profiles.
Lawful basis
[CONFIRM THE CORRECT BASIS FOR EACH PROCESSING ACTIVITY WITH COUNSEL. The list above is a starting point, not a determination.]
- Legitimate interests — for security logging and aggregated analytics.
- Consent — for the newsletter and for any non-essential cookie.
- Contract — for tester panel arrangements, where one exists.
- Legal obligation — where retention is required by law.
Processors and transfers
Data may be processed by our hosting provider, analytics provider, email provider and affiliate network. A current list is available on request from [DATA PROTECTION CONTACT EMAIL].
[STATE WHETHER DATA LEAVES THE UK/EEA AND UNDER WHAT TRANSFER MECHANISM.]
Your rights
Write to [DATA PROTECTION CONTACT EMAIL]. We respond within one month.
- Access — a copy of what we hold about you.
- Rectification — correction of anything inaccurate.
- Erasure — deletion, where no overriding obligation applies.
- Restriction and objection — including objection to processing based on legitimate interests.
- Portability — a machine-readable copy.
- Withdrawal of consent — at any time, without affecting prior processing.
- Complaint — to your supervisory authority, [NAME THE AUTHORITY].
Retention
We keep personal data only as long as it serves the purpose it was collected for. Newsletter addresses are held until you unsubscribe. [SET AND STATE A RETENTION PERIOD FOR EACH CATEGORY ABOVE.]
Children
This site is not directed at children under [AGE] and we do not knowingly collect their data.
- REV 2026.07[DATE]Initial template drafted.
MATERIAL CHANGES ARE LOGGED HERE. WE DO NOT SILENTLY EDIT A LIVE POLICY.