Privacy Policy

1. Data Controller

The data controller responsible for personal information processed through this website is Everyday Form Media Ltd, located at 24 Colmore Row, Birmingham, B3 2QD, United Kingdom. For data privacy enquiries, you may contact us at [email protected].

2. Personal Data We Collect

We collect and process minimal personal information strictly necessary for operating the publication:

• Direct Correspondence: Your name, email address, and message contents when you contact us via our contact form or editorial email.
• Newsletter Subscriptions: Your email address when you voluntarily subscribe to the Everyday Form Weekly Briefing.
• Technical Logs: IP address, browser user-agent, operating system, requested URLs, and timestamps generated by standard web server logs for security and fault diagnosis.
• Local Browser Storage: Preference flags (such as cookie notice dismissal and habit checklist state) stored locally on your device.

3. Lawful Bases for Processing

Under UK GDPR Article 6, our processing relies on:

• Consent (Art. 6(1)(a)): For sending requested email newsletters or responding to specific voluntary contact inquiries.
• Legitimate Interests (Art. 6(1)(f)): For maintaining server security, debugging technical issues, and preventing abusive activity.
• Legal Obligation (Art. 6(1)(c)): To comply with statutory accounting or legal record-keeping requirements where applicable.

4. Third-Party Sharing & Data Sales

We do not sell, rent, or trade your personal information to data brokers or third-party advertisers. Data is only accessible to essential technical infrastructure providers (such as web hosting and secure email dispatchers) who act under strict confidentiality agreements.

5. Data Retention & Security

We retain personal data only for as long as necessary to fulfill the purpose for which it was collected. Newsletter subscribers may unsubscribe at any time. Technical server logs are rotated and deleted automatically within 30 days. We employ modern SSL/TLS encryption and restricted administrative access protocols.

6. Your Data Rights Under UK GDPR

You have the right to:

• Request access to copies of your personal data.
• Request rectification of inaccurate information.
• Request erasure of your data ("right to be forgotten").
• Restrict or object to specific processing activities.
• Lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

7. Privacy Contact

To exercise your rights or make an enquiry, email our Data Protection Officer at [email protected].