1. Who we are
Northlight Notebook Publishing Ltd, Second Floor, Corbel Works, 27 Marlpit Street, Ancoats, Manchester M4 6HJ, United Kingdom, publishes this website. You can reach us about anything in this policy at [email protected].
2. What we collect
We collect personal data in three ways. When you use the contact form or email us, we receive your name, email address, and whatever you write in your message. When you visit the site, our hosting provider records standard server logs, which include your IP address, browser type, the pages requested and the time of the request. Where you have allowed analytics cookies, we collect aggregated information about which pages are read, how long visitors stay and how they arrived. We do not collect payment details, account credentials or special category data, and we ask you not to send personal information about other people through the contact form.
3. Why we use it and on what legal basis
Contact messages are used to reply to you and to correct or improve the guides, on the basis of our legitimate interest in running an accurate publication and responding to correspondence. Server logs are used to keep the site secure and to diagnose faults, also on the basis of legitimate interest. Analytics data is processed only with your consent, given through the cookie banner, and you can withdraw that consent at any time by changing your choice in the banner or clearing your browser's storage.
4. Cookies
Essential cookies and local storage are used to remember your cookie choice and to keep the site working. Analytics and functional cookies are set only if you accept them. The cookie policy lists each category, its purpose and how to opt out through your browser.
5. Who else processes your data
We use a web hosting provider to serve the site and store server logs, and an email service to receive and reply to messages. Where analytics cookies are accepted, the analytics provider processes the resulting data on our instructions. Each of these acts as a processor under a written agreement. We do not sell personal data, and we do not share it with advertisers. We may disclose data if required to by law or a court order.
6. International transfers
Some processors may store data outside the United Kingdom. Where that happens, transfers are made under the UK's adequacy regulations or the International Data Transfer Agreement, or, for transfers from the European Economic Area, under Standard Contractual Clauses.
7. How long we keep it
Contact correspondence is kept for up to 24 months after the last exchange, so that we can follow up on corrections, and is then deleted. Server logs are retained for 90 days. Analytics data is held in aggregated form for up to 26 months. Your cookie choice is stored in your own browser and stays there until you clear it.
8. Your rights
Under the UK General Data Protection Regulation and the Data Protection Act 2018 you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, to data portability where processing is based on consent, and to withdraw consent at any time. If you are in the European Economic Area, the EU GDPR gives you equivalent rights. If you are a California resident, the California Consumer Privacy Act gives you rights to know what personal information is collected, to request its deletion and to opt out of its sale; we do not sell personal information. To exercise any right, email us at the address above. We will respond within one month, or within 45 days for CCPA requests.
9. Complaints
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk. Visitors in the EEA may complain to their national data protection authority. We would appreciate the chance to resolve a concern directly first.
10. Changes
We may update this policy when our practices or the law change. The current version is always the one published on this page.