Privacy, written as a desk rather than a maze.

Who we are

The controller is cleanserdata, 25 Sansome Pl, Worcester WR1 1UA, UK. Email [email protected]. Telephone +44 7700168490. We have not appointed a statutory data protection officer. The desk handles privacy questions at the same address. If that changes, this page will say so.

What we actually collect

This website does not run an account system, a checkout, or a comment box. We do not ask you to create a profile. The information we are likely to hold is limited.

• Correspondence. If you email or call, we receive whatever you choose to send: your address, your number, and the contents of the message. Please do not send full tax returns, passport images, or bank logins. We do not need them to correct an essay.
• A consent record on your device. If you accept or reject the cookie notice, the choice is stored in local storage in your browser under the key cleanserdata_consent, with a time. That record stays on your device. It is not posted to our server by the script on this site.
• Technical requests. Like almost every site, the host that serves these pages will process IP addresses and basic request logs in order to deliver the files and keep the service reliable. We do not add a separate analytics product that follows you around the web.

Why we use it, and the UK GDPR basis

We use correspondence to reply, to handle corrections, pitches, and permissions, and to keep a short record of what was agreed if we grant permission to republish. The lawful bases we rely on are Article 6(1)(b) where we are taking steps toward a specific request you have made, and Article 6(1)(f) legitimate interests in running a small publication, answering readers, and defending ourselves if a complaint arises. Where a message is only a casual note and no contract is in view, legitimate interests is the basis we are most likely to record. You can object to processing based on legitimate interests. We will stop unless we have a compelling reason to continue, such as a legal claim.

We do not use your correspondence for a mailing list unless you have asked to hear from us and we have confirmed that in writing. We do not sell personal information. We do not use it for automated decisions that produce legal effects.

Fonts, icons, and the cookie notice

Pages load typefaces from fonts.bunny.net and a stylesheet runtime plus icon font from cdn.jsdelivr.net. Those requests reveal your IP address and ordinary browser data to those providers, who act as independent controllers for their own logs. We use them to present the site. If you reject non-essential storage, we still load those resources because the pages are built with them. The banner is honest about that rather than pretending a reject button switches the fonts off. We do not drop advertising pixels, and we do not load a third-party analytics script as a result of you pressing Accept. Accept and Reject both only record your choice locally.

Strictly necessary storage is the consent key itself. We do not use it to recognise you on other sites.

How long we keep correspondence

Ordinary enquiries are kept for up to 24 months after the last message, so we can see what we already answered. Corrections and permissions are kept for up to six years, because publication disputes and copyright questions do not always arrive quickly. We may keep a record longer if the law requires it or if a claim is underway. Call notes, if we make any, follow the same periods. Hosting logs follow the host's ordinary rotation. We do not build a private archive of readers for its own sake.

Who else sees it

Email passes through our mail provider. The website is hosted so that readers can fetch it. Those suppliers process data to provide the service. We do not authorise them to use your correspondence for their own marketing. If a supplier stores mail outside the UK, we rely on the transfer mechanisms the UK regime recognises, such as adequacy regulations or the International Data Transfer Agreement, and we will tell you if a particular enquiry requires a transfer that is not routine. Bunny and jsDelivr see the technical request described above because your browser asks them for files.

Your rights

Under UK GDPR you can ask us to:

• confirm whether we hold information about you and for a copy of it;
• correct information that is wrong;
• delete it in the circumstances the law allows;
• restrict how we use it while a dispute is unresolved;
• receive information you provided, in a portable form, where the processing is based on a contract or consent and is carried out by automated means;
• object to processing based on legitimate interests;
• complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113. We would like the chance to put a mistake right first, but you do not have to ask us before you complain.

Write to [email protected] with the subject "Privacy request". We may need enough detail to be sure we are writing to the right person. We aim to respond within one month. If a request is complex we will tell you why we need longer, up to the further two months the law allows.

Children

The journal is written for adults running or considering a trade. We do not knowingly collect information from children. If you believe a child has written to us, tell us and we will delete the correspondence unless we are required to keep it.

Changes

If we start using a form, a newsletter tool, or analytics, this page will change before or at the same time, and the banner will change with it. The date at the top is the date of the current version.