This Privacy Policy explains how Ceiriog Online ("we", "us", "our") collects, uses, stores and protects personal data when you visit and use the website at ceiriog.online. We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) as retained in UK law by the European Union (Withdrawal) Act 2018, and the Data Protection Act 2018.
The data controller responsible for your personal data is Ceiriog Online, operated from 4 Summerhill Rd, Dartford DA1 2LP, United Kingdom. You can contact us regarding data protection matters at [email protected] or by telephone on +44 844 247 1388.
As a small independent publishing project, we do not have a designated Data Protection Officer. All data protection queries are handled directly by the site operator.
Data you provide directly: When you use the contact form on this website, you provide your name, email address and the content of your message. This information is transmitted via your email client when you submit the form and is received by us at [email protected]. We do not operate a server-side form processing system.
Automatically collected technical data: When you visit this website, your browser automatically transmits certain technical information including your IP address, browser type and version, operating system, referring URL, pages visited and time of visit. This data may be collected by our hosting provider and, if analytics services are active, by third-party analytics tools.
Cookie data: We use cookies on this website. Please refer to our Cookie Policy for full details of the cookies used and your choices regarding them.
We do not collect sensitive personal data (also referred to as special category data under UK GDPR) through this website.
We use the personal data you provide through the contact form for the sole purpose of reading and responding to your message. We do not use this data for marketing, profiling or any other purpose.
Technical data collected automatically is used for the purposes of website security, performance monitoring and understanding how the site is used in aggregate. This data is not used to identify individual users.
We do not use your personal data for automated decision-making or profiling as defined under Article 22 of UK GDPR.
Under UK GDPR, we must have a lawful basis for processing personal data. The lawful bases we rely on are:
Legitimate interests (Article 6(1)(f)): Processing your contact form submission to respond to your enquiry represents a legitimate interest of operating this website. We have assessed that this interest is not overridden by your rights and freedoms, given the limited nature of the data involved and the direct relevance to your decision to contact us.
Consent (Article 6(1)(a)): Where we use non-essential cookies, we rely on your consent, which you provide through our cookie consent mechanism. You may withdraw this consent at any time by adjusting your cookie preferences.
Legal obligation (Article 6(1)(c)): We may process data where required to do so by applicable UK law.
Email correspondence received through our contact form is retained in our email system for as long as the correspondence remains relevant to the operation of the website. We periodically review and delete correspondence that is no longer needed. In most cases, correspondence is not retained beyond two years from the date of receipt unless there is an ongoing matter that requires it.
Technical and analytical data collected through the website is retained in accordance with the data retention policies of the relevant hosting and analytics providers. We do not retain this data independently beyond what is held by those providers.
We do not sell, rent or otherwise transfer your personal data to third parties for commercial purposes. We may share data with the following categories of recipients only to the extent necessary for the operation of this website:
Hosting providers: Our website hosting provider processes technical data as part of delivering the website to you. They act as a data processor under a data processing agreement.
Email service providers: Our email service provider processes email data as part of delivering and storing email correspondence.
Analytics providers: Where analytics cookies are accepted, data may be shared with analytics service providers for the purpose of understanding aggregate website usage.
We may disclose personal data where required to do so by law, court order or other legal process, or where we believe disclosure is necessary to protect the rights, property or safety of Ceiriog Online or others.
Some of the third-party service providers we use may process personal data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements, including reliance on adequacy decisions, standard contractual clauses or other approved transfer mechanisms.
Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:
Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may request that we correct inaccurate personal data.
Right to erasure: You may request that we delete your personal data where there is no longer a legitimate reason for us to hold it.
Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances.
Right to data portability: Where processing is based on consent or contract, you may request that we provide your data in a portable format.
Right to object: You may object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Rights related to automated decision-making: You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not carry out such processing.
To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receiving your request, as required by UK GDPR. If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. Our website is served over HTTPS. Email communications are handled through standard encrypted email protocols.
No method of transmission over the internet or electronic storage is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the operation of the website. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the website following any changes constitutes your acknowledgement of the updated policy.
If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us:
Email: [email protected]
Post: Ceiriog Online, 4 Summerhill Rd, Dartford DA1 2LP, United Kingdom
Telephone: +44 844 247 1388