Privacy notice
Privacy notice (draft)
Please review before launch
This draft outline is for the site owner to review against applicable UK data protection and privacy requirements before going live. It is not legal advice.
What we collect
- Comments you submit (name, optional role/title, comment text, optional associated post).
- Technical metadata used for abuse prevention (hashed IP address, user agent).
- Email addresses if you subscribe to new-post notifications.
- Administrator account details for editorial staff.
Why we collect it
- To moderate and publish guestbook comments.
- To send confirmation emails and new-post announcements you requested.
- To operate and secure the website.
Retention
- Approved comments remain published until removed by a moderator.
- Rejected and spam comments may be retained for a limited period for abuse prevention, then deleted.
- Inactive or unsubscribed email addresses are deactivated; administrators may delete records.
Cookies
- This website does not use analytics, advertising, tracking, or third-party cookies.
- Strictly necessary security cookies are used only to protect form submissions against cross-site request forgery (`csrftoken`) and for administrator sign-in (`/admin/`).
Your choices
- You can unsubscribe from emails at any time via the link in each announcement.
- To request correction or deletion of a published comment, contact the site editors.
Contact details and a finalised privacy notice must be added by the site owner before public launch.