Privacy Policy

Dranvelo Letters collects the following categories of personal data:

• Contact form data: name, email address, and message content submitted via the contact form on this website.
• Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform. This data is collected automatically when you access the website.
• Usage data: information about how you use the website, including pages visited, time spent on pages, and referral sources. This data is collected in aggregate and is not linked to individual identifiable users without consent.
• Cookie data: data stored in cookies placed by this website. See Section 8 and our Cookie Policy for details.

We do not collect sensitive personal data (including data relating to your health, dietary conditions, or professional history) through this website at any point.

We use the data collected for the following purposes:

• To respond to enquiries submitted via the contact form.
• To maintain and improve the performance and security of this website.
• To understand how readers use the website and which content is most read, in aggregate and anonymised form.
• To comply with our legal obligations under UK GDPR and the Data Protection Act 2018.

We do not use your personal data for automated decision-making or profiling.

The legal bases on which Dranvelo Letters processes your personal data are:

• Legitimate interests: processing technical and usage data to operate and improve the website.
• Consent: placing non-essential cookies where you have provided consent via the cookie banner.
• Contract: processing contact form data to respond to your enquiry.
• Legal obligation: retaining certain records as required by applicable law.

Contact form submissions are retained for a period of twelve months from the date of submission, after which they are deleted unless an ongoing correspondence or legal obligation requires continued retention.

Technical and usage data collected for website analytics is retained in anonymised aggregate form for up to twenty-four months.

Cookie data is retained in accordance with the individual cookie lifespans described in our Cookie Policy.

Dranvelo Letters does not transfer your personal data to third parties for commercial purposes. We may share your data with:

• Hosting and infrastructure providers: who process data on our behalf under data processing agreements.
• Analytics providers: who receive anonymised usage data to produce aggregate reports on website performance.
• Legal authorities: where required by law or in response to a lawful request.

All third-party processors engaged by Dranvelo Letters are required to maintain appropriate technical and organisational security standards.

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

• The right to be informed about how your data is used (this policy).
• The right of access to the personal data we hold about you.
• The right to rectification of inaccurate personal data.
• The right to erasure of your personal data, subject to certain conditions.
• The right to restrict processing of your personal data.
• The right to data portability.
• The right to object to processing based on legitimate interests.
• Rights in relation to automated decision-making and profiling (we do not engage in this).

To exercise any of these rights, contact the data controller at [email protected]. We will respond within one calendar month of receipt of a verified request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been processed unlawfully.

This website uses cookies. A full description of the cookies used, their purpose, duration, and the basis for their use is provided in our Cookie Policy.

You may manage your cookie preferences at any time by selecting Cookie Settings in the website footer.

This website is not directed at persons under the age of 16. We do not knowingly collect personal data from persons under 16. If you believe we have inadvertently collected such data, please contact us immediately at [email protected] and we will take steps to delete it.

We may update this Privacy Policy from time to time. Any material changes will be indicated by an updated "Last updated" date at the top of this page. Continued use of the website following a change to this policy constitutes your acknowledgement of the revised version.

For any questions about this Privacy Policy or to exercise your data rights, please contact: