The short version
If you only read the site, we do not ask you to create an account, and we do not run advertising or analytics cookies. If you email or telephone us, we use what you send so we can reply. We do not sell personal data. We do not want your National Insurance number, your account numbers, or a statement of your holdings. Please do not send them.
Data we actually process
- Correspondence. Your email address, name if you give one, telephone number if you call, postal address if you write by post, and the content of the message. You provide this. The lawful basis is legitimate interests: answering people who contact an editorial desk, keeping a record of corrections, and defending ourselves if a complaint arises. Where a message is a privacy request, we also rely on the need to comply with a legal obligation.
- Cookie choice. The banner stores a small record in local storage on your device under the key cityfulviro_consent. It contains the status you chose and a time. It is not sent to our server, because this website has no account system and the choice never leaves the browser unless you clear it. The lawful basis is consent. If you reject non-essential storage, we store only the fact of that rejection, so the banner does not return on every page.
- Technical requests to other services. Pages load typefaces from fonts.bunny.net and a styling helper plus icons from cdn.jsdelivr.net. Those providers see a normal browser request, which includes your IP address and the usual technical headers. We do not control their networks. Their processing is necessary to present the pages as designed. You can block third-party requests in your browser; the words will remain, and the layout may look plainer.
We do not use the cookie banner to switch those design files off. They are not cookies. Accepting and rejecting have the same effect on trackers, because there are no analytics or advertising trackers to enable. The stored choice is about honesty and about not nagging you.
What we do not do
We do not sell, rent, or swap personal data. We do not use it to build advertising profiles. We do not take payment on this website, so we do not process card numbers. We do not knowingly collect data about children. The notes are written for adults. If we learn that we hold personal data of a child, we will delete it.
How long we keep correspondence
We keep emails, letters, and notes of calls for as long as we need them to handle the point you raised, and then for up to 24 months so we can see the history of a correction or a complaint. We keep them longer only if the law requires it, or if a dispute is still open. Local storage stays on your device until you clear it or change your choice.
Where processing happens
We read correspondence in the United Kingdom. We do not deliberately transfer your letters to a processor outside the UK. Font and script networks may handle technical requests on infrastructure that is not confined to the UK. That is a feature of loading those files, not a transfer of your mailbox. If you would rather not make those requests, use a browser setting that blocks them.
Your rights
You can ask us to confirm whether we hold personal data about you, to provide a copy, to correct it, to delete it, to restrict how we use it, and to object to processing based on legitimate interests. Where processing is based on consent, you can withdraw consent at any time, including by clearing local storage. You can ask for data you provided to be sent to you in a portable form where the law gives that right. None of these rights is absolute. We may refuse a request that is manifestly unfounded, or keep a slim record where we must.
To exercise a right, email [email protected] with the subject “Privacy request”. We may need enough detail to find the correspondence, and we will not ask you to email a copy of a passport unless we cannot identify you any other way.
You can complain to the Information Commissioner’s Office at ico.org.uk. We would like the chance to put the matter right first. You do not have to give us that chance.
Security
Email is not a perfect channel. Do not send secrets in it. We limit access to the mailbox to the people who answer the desk. We do not claim a certification we do not hold. If we believe a breach is likely to risk your rights, we will tell you and the ICO when the law says we must.
Changes
If we start using a form that stores data on a server, or if we add analytics, this page will change first, the date at the top will move, and the banner will describe the new thing in concrete words. Until that happens, the description above is the whole story.