Privacy Policy

1. Who We Are

This Privacy Policy applies to Flatoren Compendium, an independent editorial publication registered and based in England. Our principal place of activity is 48 Pakenham Street, London WC1X 0LB, United Kingdomngdomdomdom.

For enquiries relating to this policy or to your personal data, contact us at:

We are committed to handling personal data responsibly and in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

We may collect the following categories of personal data:

• — Contact data: your name, email address, and any message content you submit via the contact form on this site.
• — Usage data: IP address, browser type, device type, pages visited, time on site, and referring URL, collected automatically when you visit the site.
• — Cookie data: preferences and session identifiers stored in your browser. See the Cookie Policy for full details.

We do not collect sensitive personal data, financial information, or data concerning your dietary or wellness habits beyond what you voluntarily share in correspondence.

3. How We Use Your Data

Personal data collected by Flatoren Compendium is used for the following purposes:

• — Responding to enquiries submitted via the contact form.
• — Understanding how visitors engage with the publication so that editorial content can be improved.
• — Ensuring the security and proper functioning of the website.
• — Complying with legal obligations where required.

We do not use personal data for automated decision-making or profiling. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Legal Basis for Processing

The legal basis on which we process your personal data depends on the nature of the data and the purpose for which it is used:

• — Contractual necessity: processing required to respond to your enquiry or correspondence.
• — Legitimate interests: understanding how the site is used in order to improve the editorial experience, where this does not override your rights.
• — Consent: for non-essential cookies, where you have provided consent via the cookie banner. You may withdraw this consent at any time.
• — Legal obligation: where processing is required to comply with applicable law.

5. Data Retention

Contact form data is retained for a maximum of twelve months following the resolution of the correspondence, after which it is securely deleted. Usage data collected through analytics is retained in aggregated, anonymised form and does not personally identify individual visitors beyond a rolling twelve-month window.

Where we are required by law to retain data for a longer period, we will do so and will notify you where this is applicable.

6. Your Rights

Under UK GDPR, you have the following rights with respect to your personal data:

• — Right of access: to request a copy of the personal data we hold about you.
• — Right of rectification: to request that inaccurate data is corrected.
• — Right of erasure: to request that your data is deleted, subject to legal retention requirements.
• — Right to restrict processing: to request that we limit how we use your data.
• — Right to portability: to receive your data in a portable, machine-readable format.
• — Right to object: to object to processing carried out on the basis of legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month of receiving your request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.

7. Third-Party Services

This website uses a limited number of third-party services that may set cookies or collect data as described in our Cookie Policy. These services include analytics and font delivery providers. We have assessed each service against our data minimisation principles and do not engage services that collect more data than is necessary for the stated purpose.

We do not embed third-party advertising networks, remarketing pixels, or social media tracking scripts on this publication.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. The site is served over HTTPS. Contact form submissions are transmitted securely and stored with access restricted to the editorial team only.

No method of electronic transmission or storage is entirely free of risk. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, notify affected individuals without undue delay.

9. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in how we handle data or changes in applicable law. The date at the top of this page records when the policy was last revised. Continued use of the site following a revision constitutes acceptance of the updated policy.

If a revision materially changes the way we handle your data, we will note the nature of that change prominently at the top of the revised policy for a period of thirty days.