1. Data Controller Identification
The data controller responsible for personal data collected under this policy is Meadowreel Shuffleit Media Ltd, a private company incorporated in England and Wales under Company Number 12948210, with its registered address at 14 St Mary Street, Tenby, Pembrokeshire, SA70 7HN, United Kingdom. Any questions regarding our data governance should be directed to our appointed Data Protection Officer at [email protected].
2. Personal Data We Collect
We restrict our data intake to strictly necessary operational parameters:
- Direct Communication Records: When you complete our contact enquiry form or email our editorial desk, we store your name, email address, topic selection, and the contents of your message.
- Technical & Network Metadata: Upon visiting our website, our server logs automatically capture pseudo-anonymized IP addresses, browser user-agent tokens, referring URLs, and request timestamps to monitor server reliability and block malicious intrusion attempts.
- Cookie & Preference Choices: We store your opt-in or opt-out decision regarding analytics storage inside your local web browser localStorage container.
3. Legal Bases for Processing (UK GDPR & DPA 2018)
We process your personal data under the lawful conditions defined in Article 6 of the UK General Data Protection Regulation (UK GDPR):
- Consent (Art. 6(1)(a)): Applied when you explicitly choose to accept optional analytical cookies or opt-in to receiving direct correspondence.
- Legitimate Interests (Art. 6(1)(f)): Applied when handling direct inquiries submitted through our contact portal and defending our web server infrastructure against cyber security threats.
- Legal Obligation (Art. 6(1)(c)): Applied where company records must be retained to demonstrate corporate, tax, or statutory compliance with United Kingdom regulatory bodies.
4. Third-Party Data Processors
We do not sell, rent, or trade your personal information. We engage select technical infrastructure vendors who act under strict Data Processing Agreements:
- Static Hosting Infrastructure: Cloud hosting facilities located inside the UK and European Economic Area (EEA) providing content delivery networks and edge cache resilience.
- Secure Email Routing Services: Encrypted mail servers processing inbound and outbound communication sent to
[email protected].
5. Data Retention & Erasure
We retain submitted contact correspondence for a maximum period of twenty-four (24) months following the resolution of your inquiry, after which electronic records are permanently erased from our mail servers. Automated server firewall access logs are rotated and deleted after ninety (90) calendar days. Local browser consent tokens remain stored on your client device until cleared by the user.
6. Your Statutory Rights (GDPR & CCPA)
Under UK GDPR, European data directives, and the California Consumer Privacy Act (CCPA) where applicable, you possess significant rights regarding your data:
- Right of Access: Request a confirmation and copy of all personal records we hold regarding your identity.
- Right to Rectification: Require prompt correction of inaccurate or incomplete contact details.
- Right to Erasure ("Right to be Forgotten"): Demand the immediate deletion of your communication records when they are no longer necessary for the original collection purpose.
- Right to Restrict Processing: Request the temporary suspension of data processing during formal disputes.
- Right to Object: Oppose processing grounded exclusively on legitimate commercial interests.
To exercise any statutory right, email our Data Protection Officer at [email protected]. We respond to verified data requests within thirty (30) business days without fee.
7. Supervisory Authority
If you consider that our processing of your personal information infringes statutory privacy standards, you have the right to lodge a formal complaint with the UK Information Commissioner's Office (ICO) at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF (ico.org.uk).