1. Who is responsible
The legal operator’s identity is awaiting confirmation.
A dedicated legal and privacy contact must be supplied before publication. General enquiries can be made through the contact page.
Any required UK/EU representative or data protection officer details, or a determination that these appointments do not apply, must be confirmed before publication.
This notice covers the marketing site and its Supabase-backed editorial administration. It does not describe the separate core workspace’s customer-document processing. Review the core service’s privacy notice and customer agreement when using that application.
2. Information handled here
- Visitor requests: IP address, browser and device details, requested URL and request timing may be handled by the hosting provider to deliver and protect the site.
- Appearance: the Light, Dark or System choice you make is stored locally in your browser.
- Administrator accounts: email address, Auth user ID, password authentication information, session tokens and administrator allowlist status are handled by Supabase. Passwords are not published in the journal or article database.
- Editorial information: article content, author names and publication details entered by administrators. Published content and author names are public.
- Correspondence: if you email the team, the operator receives the information you choose to send. This site currently has no public contact submission form, newsletter signup or customer document upload.
3. Purposes and lawful bases
The intended basis for delivering and securing the website and managing staff administrator access is legitimate interests in running a reliable, protected information service. Responses to business enquiries may rely on legitimate interests or steps requested before a contract, depending on the enquiry. Compliance with a binding legal obligation uses that legal obligation as the basis.
Providing optional correspondence is your choice; without a reply address the team cannot respond. Administrator credentials and authorization are required to access private editorial functions. Anonymous visitors can read and search published articles without an account.
This website does not use personal information for advertising profiles or solely automated decisions with legal or similarly significant effects. These intended bases must be confirmed against the operator’s actual practices before this draft is published.
4. Providers and recipients
Supabase provides the marketing database and administrator authentication. The website host delivers public pages; the operator’s email provider handles correspondence and any configured authentication email delivery. Authorized administrators can access editorial content within their permissions.
The specific host, email providers, Supabase project region and relevant provider arrangements have not yet been confirmed for this notice.
Public articles and bylines may be read, indexed and shared by anyone. Customer consignment documents from the core platform are not displayed by this marketing site.
5. International processing
Provider locations, international access and the applicable transfer arrangements must be confirmed before publication. This draft does not assert that data stays in the UK or EEA.
Where required, the operator must identify the relevant adequacy decision or contractual safeguards and explain how to request information about them.
6. Retention
Retention periods or documented criteria for website logs, administrator accounts, correspondence and backups are awaiting operator confirmation. Revoking access does not by itself delete an Auth account or provider logs.
A published article remains public until it is withdrawn by an authorized editor. Copies already retained by search engines or sharing services are controlled by those services. The core platform’s accessible-history plan limits are not a marketing-site retention policy.
7. Your choices and rights
Where UK or EU data protection law applies, rights may include access, correction, erasure, restriction and portability, subject to the conditions of the relevant law. If processing relies on consent, you may withdraw it without affecting earlier lawful processing.
You may object to processing based on legitimate interests. Contact the operator to explain the processing you object to. You may also object to direct marketing; no marketing mailing list is implemented on this site.
Use the contact details above for requests. The operator may need proportionate information to verify your identity. You can complain to the UK Information Commissioner’s Office or the relevant EEA supervisory authority.
8. Browser storage and linked services
The Cookie Policy lists this site’s browser storage and reset controls. The current code contains no advertising tags or third-party analytics integration. This must be reassessed if the host or operator adds tracking.
Links to the core platform, government guidance or external services take you to websites with their own privacy notices.
9. Updates
The operator should review this notice when data practices, providers or features change. A review date will be shown once the notice is finalized.