Privacy Policy

2. Data Controller

The data controller for this website is Balvorn Compendium, based at 31 Leather Lane, London EC1R 4QE, United Kingdom.

For all data-related enquiries, please contact us at [email protected] or by post to the address above.

3. Data We Collect

We collect the following categories of personal data:

4. Legal Basis for Processing

We process personal data on the following legal bases under UK GDPR:

• ▸ Legitimate interests — for site security, server logs, and responding to enquiries where you have initiated contact
• ▸ Consent — for non-essential cookies, where you have provided consent via our cookie banner
• ▸ Contract — where processing is necessary to respond to a specific request or enquiry you have made

5. How We Use Your Data

We use personal data for the following purposes:

• ▸ Responding to contact form submissions and editorial enquiries
• ▸ Maintaining website security and identifying technical issues
• ▸ Understanding how readers navigate the site in aggregate, to improve content and structure
• ▸ Complying with applicable legal obligations

We do not use your data for automated decision-making or profiling. We do not sell, rent, or otherwise transfer your personal data to third parties for commercial purposes.

6. Data Retention

Contact form data is retained for a maximum of 12 months from the date of receipt, unless ongoing correspondence requires a longer retention period. Server log data is retained for a maximum of 90 days. Cookie data retention periods are detailed in our Cookie Policy.

Data is securely deleted at the end of the applicable retention period. We do not retain personal data for longer than is necessary for the purpose for which it was collected.

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• ▸Right of access — to request a copy of personal data we hold about you
• ▸Right to rectification — to request correction of inaccurate personal data
• ▸Right to erasure — to request deletion of your personal data where we have no lawful basis to retain it
• ▸Right to restrict processing — to request that we limit how we use your data in certain circumstances
• ▸Right to object — to object to processing based on legitimate interests
• ▸Right to withdraw consent — where processing is based on consent, to withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Third-Party Services

Our website uses the following third-party services that may process data as part of their normal functioning:

• ▸Google Maps — embedded on our Contact page to display our office location. Google's privacy policy applies to data processed by this service.
• ▸Google Fonts — used for typography. Font files are loaded from Google's servers. Please refer to Google's privacy policy for details.
• ▸CDN Services — JavaScript and CSS libraries are loaded from third-party CDN providers (jsDelivr, Cloudflare, unpkg). These services may log request data.

9. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. Our website is served over HTTPS. Contact form data is transmitted securely.

No method of electronic transmission or storage is entirely secure. While we take appropriate precautions, we cannot warrant the absolute security of data transmitted to or from our website.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Updated versions will be posted on this page with a revised “last updated” date. We encourage you to review this page periodically.

Continued use of our website following any update constitutes acceptance of the revised policy.