Privacy policy

Who we are

This website, nimbletcuriousvault.boats, is published by Kilnhouse Editorial Limited, 27 Bellfinnan Street, Dennistoun, Glasgow G31 3RQ, United Kingdom. For data protection purposes we are the controller of the personal data described in this policy. Questions about it should go to [email protected].

What we collect

We collect two kinds of information. The first is what you send us. If you complete the contact form, we receive the name, email address, subject category and message you provide, along with the confirmation that you agreed to be contacted. If you email us directly, we receive whatever your message contains.

The second is technical information generated automatically when a browser requests a page. Our hosting provider records server log data such as IP address, request time, the page requested, referring page, and browser and operating system identifiers. This is standard for any web server and is used for security, fault diagnosis and abuse prevention.

If you consent to analytics cookies, we also receive aggregated information about which pages are viewed and how visitors move between them. Analytics data is used at the level of pages and totals, not individuals, and we do not attempt to identify you from it.

Why we use it, and on what legal basis

We use contact form data to reply to you and to keep a record of correspondence, relying on your consent and on our legitimate interest in responding to enquiries. We use server log data for the security and reliability of the site, relying on legitimate interests. We use analytics and functional cookies only where you have consented through the cookie banner, and consent can be withdrawn at any time.

We do not sell personal data, we do not share it with advertisers, and we do not use it to build profiles or to target advertising.

Cookies and similar technologies

Cookies and browser storage are covered in detail in our cookie policy, which lists each category and explains how to change your choice. Essential storage keeps the site working and records your banner selection. Analytics and functional storage are optional and load only after consent.

Processors and third parties

We rely on a small number of service providers to operate the site: a web hosting and content delivery provider, an email service provider for the inboxes on our domain, and an analytics provider where analytics consent has been given. These providers process data on our written instructions and are not permitted to use it for their own purposes. Where a provider processes data outside the United Kingdom, we rely on the transfer mechanisms permitted by UK data protection law, such as adequacy regulations or standard contractual clauses with the UK addendum.

We may disclose information where we are legally required to do so, or where it is necessary to establish, exercise or defend legal claims.

How long we keep it

Contact correspondence is kept for as long as needed to deal with the matter and for a reasonable period afterwards in case the same issue returns, after which it is deleted. Server logs are retained on a short rolling basis by our hosting provider and then overwritten. Analytics records are retained in aggregate form. Consent records are kept for as long as the consent is relied upon.

Your rights

Under the UK GDPR and the Data Protection Act 2018 you have the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object to processing based on legitimate interests, and the right to withdraw consent at any time. Exercising these rights is free in normal circumstances and we will respond within the statutory period.

If you are in the European Economic Area, the EU GDPR gives you equivalent rights and you may complain to your national supervisory authority. If you are a California resident, the California Consumer Privacy Act as amended gives you rights to know what personal information is collected and disclosed, to request deletion and correction, to opt out of any sale or sharing of personal information, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined in that legislation.

Complaints

If you are unhappy with how we have handled your data, please write to us first at [email protected]. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, which publishes guidance and a complaints procedure on its website.

Children

This site publishes editorial material about alcoholic drinks and is intended for adults of legal drinking age. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

Changes to this policy

We update this policy when our processing changes or when guidance changes. The current version is always the one published on this page, and material changes will be described here rather than made quietly.