Legal
Privacy policy
What is collected, why, where it goes and how to get it deleted. Written plainly, because a policy nobody can read protects nobody.
Not reviewed. Do not publish yet.
This page is a structural draft. It lists the sections a privacy notice needs and states what this site actually does today, but it has not been reviewed by a lawyer and the entries marked like this are unresolved. Three things must be settled before it can go live: the registered legal entity and its address, whether the site will take payments, and which third-party processors are used.
1. Who is responsible for your data
The data controller is [registered legal entity name], registered at [registered address]. Questions about this notice or about your data go to [privacy contact address].
The trading name used across this site is a working placeholder and is not yet a registered entity. A privacy notice cannot be published without the real one, because the controller is who a reader would bring a complaint against.
2. What this site collects today
As currently built, this site is static. It sets no advertising or analytics cookies, runs no third-party trackers, and has no accounts. The only data that reaches us is what you type into a form and send.
| Enquiry form | Required: name, email, topic, message, and two consent ticks (this policy; age or guardian consent). Optional: organisation and a budget band. No phone number, address, date of birth or ID is asked for, because a reply does not need them. Nothing else is inferred from it. |
|---|---|
| Third-party code | None. Every script, font, image and video is served from this site itself: no CDN, analytics, advertising, social or embed SDK is loaded. Code bundled with the site runs only in your browser and sends nothing anywhere. |
| Cookie preference | Your choice on the cookie preferences page, stored in your own browser. It never leaves your device. |
| Server logs | [to confirm with the eventual host] — typically IP address, timestamp and requested URL, kept for security and debugging. |
| Analytics | None at present. If any is ever added it will appear here first, and on the cookie preferences page, before it is switched on. |
| Payment data | None. The site takes no payments today. [If that changes, card data would be handled by the payment provider and never touch our servers — provider to be named here.] |
3. Why we hold it, and on what basis
- To answer you. If you send an enquiry we keep it to reply and to follow up. Basis: your consent, given by sending it.
- To keep the site working and secure. Logs help diagnose faults and abuse. Basis: legitimate interest.
- To meet legal obligations. [Retention required by tax or company law, once the entity exists.]
4. How long it is kept
Enquiries: [retention period], then deleted. Server logs: [retention period]. Your cookie preference stays in your browser until you clear it or change it.
5. Who else sees it
No data is sold, and none is shared for advertising. It is shared only with the processors needed to run the service: [hosting provider], [email provider], and [form or CRM provider, if any]. Each must be named here before publication, along with whether any of them transfer data outside your country.
6. Your rights
You can ask for a copy of what we hold, ask for it to be corrected, ask for it to be deleted (see section 7), withdraw consent, or object to how it is used. Write to [privacy contact address] and we will respond within [statutory period for the chosen jurisdiction]. If you are not satisfied you can complain to [the relevant supervisory authority].
7. Deleting your data
To have everything we hold about you deleted, use the contact form and choose Data access or deletion request, or write to [privacy contact address] from the address you used. Say “delete my data”; no reason is needed. We confirm in writing within 30 days once it is done, and tell you if anything must be kept by law and for how long. The same route works for a copy of your data or a correction. Your cookie preference is stored only in your browser: clear it yourself on the cookie preferences page.
8. Emails and unsubscribing
Sending an enquiry does not sign you up to anything. We only reply to what you asked. No newsletter or marketing email exists today; if one is ever added it will be strictly opt-in, from a separate unticked box, and every message will carry a one-click unsubscribe link that works without logging in. You can also unsubscribe at any time by replying “unsubscribe” or through the contact form.
9. Children
Competitions and kits are used in schools, so some readers will be minors. Every form asks you to confirm you are 18 or older, or that a parent, guardian or teacher has agreed to you sending it; the form cannot be sent without that tick. We do not knowingly collect more from a child than a name and a contact address to reply to, and never use it for marketing. If you believe a child has sent us data without that consent, ask us to delete it as in section 7. Competition entry will require verifiable consent from a parent, guardian or the supervising institution before any entry form opens.
10. Changes to this notice
If this changes materially we will say so on this page and date it. The date at the top is the version in force.
11. Related pages
- Cookie preferences — what is stored in your browser, and switching it off
- Terms and conditions
- Refunds and cancellation
- Contact