Privacy Policy

1. Who We Are

The data controller for this website is Taldora Review, based at 62 Warner Street, London EC1R 5EY, United Kingdomngdomdomdom. You may contact us at [email protected] or by telephone at +44 20 7382 5196.

As a small independent editorial publication, we do not appoint a formal Data Protection Officer, but all data-related enquiries are handled by the editorial team and addressed within 30 days of receipt.

2. What Personal Data We Collect

We collect only the personal data necessary to operate the publication and respond to reader enquiries. This includes:

• — Contact form data: when you submit a message via our contact form, we collect your name, email address, and the content of your message.
• — Server log data: our web server automatically records your IP address, browser type, operating system, referring URL, and the pages you visit. This data is retained for up to 30 days for security and performance purposes.
• — Cookie data: we use cookies as described in our Cookie Policy. Cookie preferences you set via the consent banner are stored locally in your browser.

We do not collect financial data, national identity numbers, or any data classified as a special category under UK GDPR (including data related to health conditions, ethnic origin, or political opinions).

3. Legal Basis for Processing

We process personal data on the following legal grounds under UK GDPR:

• — Legitimate interests (Article 6(1)(f)): server log data is processed for the legitimate interest of maintaining site security and diagnosing technical issues.
• — Contract performance (Article 6(1)(b)): contact form data is processed to respond to your enquiry, which constitutes a pre-contractual relationship.
• — Consent (Article 6(1)(a)): analytics and non-essential cookies are placed only with your consent, as recorded through the cookie consent banner.

4. How We Use Your Data

Personal data collected through this site is used only for the purpose for which it was provided:

• —Contact form submissions are used solely to respond to the message received. We do not add contact form submitters to mailing lists or share their data with third parties.
• —Server log data is used to monitor for unusual access patterns and to identify server errors. It is not cross-referenced with personal profiles.
• —Consented analytics data is used in aggregate form to understand which articles and sections of the site are of most interest to readers. We do not build individual user profiles.

5. Data Sharing and Third Parties

We do not sell, rent, or trade personal data. We do not share personal data with advertisers, data brokers, or marketing platforms.

The website is hosted on servers operated by our web hosting provider, which acts as a data processor on our behalf under a data processing agreement. Server log data is held on these servers and is subject to our 30-day retention limit.

Where third-party analytics scripts are loaded (subject to cookie consent), those scripts are governed by the respective providers' privacy policies. We do not instruct those providers to link analytics data to identified individuals.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described above:

• —Contact form submissions: retained for up to 12 months, then deleted unless ongoing correspondence requires longer retention.
• —Server log data: retained for up to 30 days, then automatically overwritten.
• —Cookie preference records: retained in your browser for up to 12 months, or until you clear your browser data.

7. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• —Right of access: you may request a copy of the personal data we hold about you.
• —Right to rectification: you may ask us to correct inaccurate data.
• —Right to erasure: you may ask us to delete your personal data where there is no lawful reason for us to continue holding it.
• —Right to restrict processing: you may ask us to pause the use of your data in certain circumstances.
• —Right to data portability: where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
• —Right to object: you may object to processing based on legitimate interests.
• —Right to withdraw consent: where processing is based on consent, you may withdraw it at any time by adjusting your cookie preferences via the Cookie Settings link in the footer.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. International Data Transfers

Where third-party services used on this site are based outside the United Kingdom or European Economic Area, we ensure that appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions recognised under UK law. Details of specific safeguards may be provided on request.

9. Security

We implement appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, or disclosure. The site is served over HTTPS. Contact form submissions are transmitted over encrypted connections. Access to stored correspondence is restricted to members of the editorial team.

10. Changes to This Policy

This Privacy Policy may be updated from time to time. The date of the most recent revision is shown at the top of this page. Continued use of the site following a revision constitutes acceptance of the updated policy.