Privacy policy

Who is responsible

Held Note is an independent review desk operating from Skypark 5, 45 Finnieston Street, Glasgow G3 8JU, United Kingdom. The three people named on the room are jointly responsible for this site and for anything sent to it. For any question about this policy, write to [email protected].

What we do not collect

We want to be specific about the absences, because they are the substance of this policy. This site contains no analytics package of any kind, no advertising or advertising identifiers, no social media buttons or embeds, no comment system, no newsletter sign-up, no fingerprinting scripts, no A/B testing, and no content delivery network. Every file the site loads — stylesheets, fonts, icons, images and one JavaScript file — is served from peluqari.pro itself. Your browser makes no request to any other domain while reading these pages.

The contact form

The form on write in is checked entirely inside your browser. When you submit it, the page confirms that the message looks complete and then asks you to send the same text by email. Nothing is transmitted to us by the form itself, because a static site has no server-side code to receive it.

If you then email us, we hold what you send: your name as you give it, your email address, the subject you chose, and the text of your message. We use it to reply and, where relevant, to act on a correction or add a game to the reading queue. The lawful basis is our legitimate interest in answering correspondence, and your consent where you have given it in the form. We keep messages for up to 24 months and then delete them, except where a message forms part of a published correction, in which case we keep the correspondence for as long as the correction remains on the site.

Stored in your browser

The site keeps two values in your browser's local storage. They are not cookies, they are never transmitted, and they contain nothing that identifies you. Their exact names, purposes and lifetimes are listed in the cookie policy, along with a button that removes both of them immediately.

Server logs

Our hosting provider records ordinary web server logs for the purpose of keeping the service running and secure: the requesting IP address, the time of the request, the file requested, the response status, and the user-agent string your browser sends. We do not combine these logs with anything else, we do not use them to build profiles, and we do not use them for analytics. They are retained for 14 days by the provider and then discarded.

Who else sees your data

Nobody, other than our hosting provider and our email provider, both acting as processors on our instructions and both located within the United Kingdom or the European Economic Area. We do not sell, rent, share or trade personal data. We do not transfer it outside the UK or EEA. We have never received a lawful request for user data; if we did, and we were permitted to say so, we would say so on this page.

Your rights

If you have written to us, you may ask for a copy of what we hold, ask us to correct it, ask us to delete it, ask us to restrict how we use it, or object to our use of it. Write to [email protected] and we will respond within one month, without charge. Because we hold so little, most such requests are settled the same week.

If you are unsatisfied with how we have handled a request, you may complain to the Information Commissioner's Office, the United Kingdom's supervisory authority for data protection.

Children

This site is written for a general adult audience and we do not knowingly hold personal data about children. If you believe a child has sent us their details, write to us and we will delete the message.

Changes to this policy

If this policy changes, the revised version will appear on this page with a new date at the top. We do not maintain a mailing list, so there is no notification to send; substantial changes will also be noted briefly on the front page for a fortnight.