Privacy Policy

1. Who We Are

Tarlon Gazette is an independent editorial publication focused on everyday wellness practices. The publication is not affiliated with any commercial, governmental, or institutional body.

For the purposes of data protection law, the data controller is Tarlon Gazette, operating from:

2. What Data We Collect

We collect only the data that is necessary for the functioning of this publication. The categories of data we may collect are as follows:

• ■ Contact form data: When you use the contact form on this site, we collect your name, email address, and the content of your message. This data is used solely to respond to your enquiry.
• ■ Usage data: We may collect anonymised data about how visitors interact with the site — pages visited, time spent, referring URLs — through analytics tools. This data does not identify individuals.
• ■ Cookie data: See our Cookie Policy for a full description of the cookies this site uses and how they are managed.
• ■ Technical data: Your IP address, browser type, and device type may be recorded in server logs for security and functional purposes. These logs are retained for a maximum of 90 days.

3. How We Use Your Data

We use the data we collect for the following purposes:

• ■ To respond to messages sent through the contact form.
• ■ To understand how readers engage with the archive, in order to improve content and navigation.
• ■ To maintain the security and functional integrity of the website.
• ■ To comply with legal obligations where applicable.

We do not use your data for automated decision-making or profiling. We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases for processing personal data:

• ■ Legitimate interests — for analytics and security log handling, where the benefit to the publication does not override your rights as a data subject.
• ■ Consent — for non-essential cookies and analytics. You may withdraw consent at any time via the Cookie Settings link in the footer.
• ■ Contract performance — when you contact us directly and we need to process your data to respond to your message.

5. Data Retention

Contact form submissions are retained for a maximum of 12 months from the date of the enquiry, after which they are permanently deleted. Server logs are retained for 90 days. Anonymised analytics data may be retained indefinitely.

Where you request deletion of your personal data, we will comply within 30 days unless we have a legal obligation to retain it.

6. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• ■ Right of access — you may request a copy of the personal data we hold about you.
• ■ Right to rectification — you may request correction of inaccurate or incomplete data.
• ■ Right to erasure — you may request deletion of your personal data where there is no compelling reason for us to retain it.
• ■ Right to restrict processing — you may request that we limit how we use your data in certain circumstances.
• ■ Right to object — you may object to our processing of your data where we rely on legitimate interests as our legal basis.
• ■ Right to data portability — you may request that we provide your data in a portable format where technically feasible.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Third-Party Services

This site uses third-party services to support its functioning. These include web analytics tools and content delivery networks for fonts and libraries. Third-party services are selected with attention to their own data protection practices; however, we cannot be responsible for the privacy policies or handling of data by third parties.

Where third-party services set cookies, these are documented in our Cookie Policy. We do not embed third-party social media widgets that collect data without your prior consent.

8. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or alteration. The site operates over HTTPS. Contact form submissions are transmitted via an encrypted connection.

No internet transmission is entirely secure, and we cannot absolutely ensure the security of data transmitted to this site. We will notify affected individuals and the relevant authority in the event of a data breach where required by law.

9. Changes to This Policy

We may update this policy from time to time. The most recent version is always available at this URL. Where changes are material, we will note the date of revision at the top of the document. Continued use of the site following a revision constitutes acceptance of the updated policy.

10. Contact

For any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal data, please contact us at [email protected] or by post at 28 Turnmill Street