PRIVACY POLICY

1. Who We Are

Tarlona Almanac is an independent editorial publication focused on everyday wellness practices. The publication is not affiliated with any commercial, governmental, or institutional body. For the purposes of UK data protection law, the data controller is Tarlona Almanac, located at 33 Corporation Row

If you have questions about how your personal data is handled, you may contact us at [email protected] or by post at the address above.

2. What Personal Data We Collect

We collect personal data in the following circumstances:

• —Contact form submissions. When you submit the contact form on this site, we collect your name, email address, and the content of your message. If you choose to include a telephone number or subject category, that data is also collected.
• —Automatically collected data. When you visit this site, our hosting infrastructure collects standard server log data, including your IP address, browser type, operating system, referring URL, and pages visited. This data is collected automatically and is used for site maintenance and security purposes.
• —Cookies and analytics. Subject to your consent, we may use cookies and third-party analytics tools to understand how readers engage with the publication. Full details are set out in our Cookie Policy.

We do not collect health-related personal data, financial data, or special-category data as defined by UK GDPR. We do not knowingly collect personal data from individuals under the age of 16.

3. How We Use Your Data

Personal data collected through the contact form is used solely to respond to your enquiry and to maintain a record of correspondence. We do not add contact form submissions to any mailing list without your explicit, separately given consent.

Server log data is retained for a maximum of 90 days and is used only for purposes of security monitoring and diagnosing technical issues with the site.

Analytics data, where consent has been given, is used in aggregate form to understand readership patterns across the publication — for instance, which articles attract the most engagement or how readers navigate between sections. We do not use analytics data to build individual profiles.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases for processing personal data:

• —Legitimate interests (Article 6(1)(f)) — for the handling of contact form enquiries and server log data, where we have a legitimate interest in operating and maintaining the publication.
• —Consent (Article 6(1)(a)) — for the use of non-essential cookies and analytics tools, where your consent is obtained through the cookie consent banner before any such data is collected.

5. Data Sharing and Third Parties

We do not sell, rent, or trade personal data with third parties. We share personal data only in the following limited circumstances:

• —Hosting providers. Our website is hosted by a third-party provider whose servers may process your IP address and request data as part of normal site delivery. This provider is subject to contractual obligations consistent with UK GDPR.
• —Analytics services. Where you have consented, analytics data may be shared with a third-party analytics provider. No personally identifiable information is shared; only aggregated or pseudonymised data.
• —Legal obligations. We may disclose personal data where required by law, including in response to valid requests from public authorities.

6. Data Retention

Contact form correspondence is retained for a maximum of two years from the date of the most recent communication in that thread, after which it is securely deleted.

Server log data is retained for 90 days. Analytics data, where consent applies, is retained in accordance with the policies of the relevant analytics provider, details of which are set out in the Cookie Policy.

7. Your Rights

Under UK GDPR, you have the following rights in respect of personal data we hold about you:

• —Right of access. You may request a copy of the personal data we hold about you.
• —Right to rectification. You may request that inaccurate data be corrected.
• —Right to erasure. In certain circumstances you may request that your personal data be deleted.
• —Right to restrict processing. You may request that processing be restricted pending investigation of a complaint.
• —Right to data portability. Where processing is carried out by automated means on the basis of consent, you may request your data in a portable format.
• —Right to object. You may object to processing carried out on the basis of legitimate interests.
• —Right to withdraw consent. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact [email protected]. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.