Privacy policy

Who is responsible

This website is published by Kestrel Lane Media Ltd, 4 Ashvale Buildings, 27 Harberton Street, Kelham Island, Sheffield S3 8QP, United Kingdom. The company is the data controller for personal data processed through choicegrdsocialsprout.beauty. Privacy enquiries should go to [email protected], which reaches the person responsible for data protection matters at the company. Postal enquiries can be sent to the registered address above, marked for the attention of the privacy contact.

What we collect

We collect three kinds of information.

• Information you send us. If you use the contact form or email us, we receive your name, email address, the subject you selected and the content of your message, together with anything else you choose to include.
• Technical information. Our hosting infrastructure records standard server log data when a page is requested, including IP address, the requested URL, referring page, user agent string and a timestamp. This is normal operation of a web server and is used for security, error diagnosis and abuse prevention.
• Cookie and storage information. Your cookie choice is recorded in your browser's local storage so the banner does not reappear on every page. If you consent to analytics or functional cookies, those may record a pseudonymous identifier and information about how pages are used.

We do not ask for financial details, we do not operate accounts or logins, and we do not knowingly collect information about children.

Why we process it, and our lawful bases

Under the UK General Data Protection Regulation and the Data Protection Act 2018, we rely on the following bases. Consent, for analytics and functional cookies, which are only set after you agree. Legitimate interests, for keeping the site available, secure and free of abuse, and for replying to enquiries you initiate. Legal obligation, where we must retain or disclose information to comply with UK law.

Cookies and similar technologies

The cookie banner lets you accept all cookies, reject everything that is not essential, or set your preferences by category. Essential storage is used only to make the site work and to remember your choice. Details of each category, and how to remove cookies in your browser, are in our cookie policy.

Processors and third parties

We use third-party service providers to run the site. These fall into categories rather than individual disclosures: a hosting and content delivery provider, an email service provider that carries messages sent to and from our addresses, and, where consent has been given, an analytics provider that reports aggregate usage. Each processes personal data on our instructions under a contract that restricts use to the service provided.

We do not sell personal data, we do not share it with data brokers, and we do not use it for advertising profiling.

International transfers

Some providers operate infrastructure outside the United Kingdom. Where personal data leaves the UK, we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum, together with any additional safeguards required.

Retention

Enquiry correspondence is kept while your question is open and for a reasonable period afterwards in case you follow up, then deleted or archived. Server logs are retained for a short operational period for security and diagnostics. Consent records persist in your browser until you clear site data or change your choice. Where a retention period is not fixed, we keep information only as long as necessary for the purpose described.

Your rights

Under UK GDPR you may ask for access to the personal data we hold about you, correction of inaccurate data, erasure, restriction of processing, or portability where applicable. You may object to processing based on legitimate interests, and you may withdraw consent to cookies at any time. To exercise a right, email the privacy address above; we may ask for information to confirm the request comes from you.

If you are unhappy with our response, you can complain to the Information Commissioner's Office at ico.org.uk.

Visitors covered by other regimes

Visitors in the European Economic Area have equivalent rights under the EU GDPR and may complain to their national supervisory authority. Residents of California may request information about categories of personal information collected, disclosed or sold, may request deletion, and may opt out of sale or sharing. We do not sell or share personal information in the sense used by California law, and we will not discriminate against anyone who exercises these rights.

Security

The site is served over an encrypted connection. Access to enquiry correspondence is limited to people who need it to reply. No internet service can be guaranteed completely secure, so please do not send sensitive personal information through the contact form.

Changes to this policy

We may update this policy to reflect changes in how the site operates or in applicable law. The current version always appears on this page, and material changes will be reflected in the cookie banner where consent is affected.