Privacy policy

We collect very little personal data. This policy explains what we do collect, under UK GDPR and the Data Protection Act 2018. Last updated 7 October 2026.

Data we collect

• Emails you send us. Your address and message, used to reply.
• Technical logs. Our hosting and security providers record IP addresses, browser type and pages requested to keep the site secure and working. Logs are kept for no more than 30 days.
• Affiliate redirect. When you click a link to the operator, the operator's affiliate system records that the visit came from us. We do not receive your name or account details.

Lawful bases

We reply to emails on the basis of legitimate interests, and keep logs on the basis of legitimate interests in security. We do not use your data for marketing and do not sell it.

Retention

Correspondence is deleted after twelve months unless it relates to an open correction or a legal query.

Processors

We use a hosting provider and a content delivery and security network to serve the site. They process technical data on our behalf under contract. Some processing may take place outside the UK under appropriate safeguards.

Your rights

You can ask for a copy of the data we hold about you, ask us to correct or delete it, or object to our processing. Email [email protected]. If you are unhappy with our response, you can complain to the Information Commissioner's Office.

Children

The site is for adults only, and we do not knowingly collect data from anyone under 18.

Security

The site is served over an encrypted connection, and access to our email inbox and hosting is restricted to the editorial team and protected by two-factor authentication. We do not run user accounts, comment forms or newsletters, which keeps the amount of personal data we could lose to a minimum. If a breach affecting personal data ever occurred, we would notify the Information Commissioner's Office where the law requires it and tell affected people directly.