Privacy

This site (samshar-findwell.vercel.app) is operated by . This notice explains, in plain terms, what we collect, why, and the choices you have.

What we collect

Subscriptions. When you subscribe to a newsletter we store your email address, which list you joined, when, the page you signed up on and the wording shown next to the form, so we can show what you agreed to. We then email you a link to confirm. Nothing is sent until you click it, and a sign-up that is never confirmed is deleted after 30 days. You can unsubscribe at any time via the link in every email. If an email to you bounces permanently, or you mark one as spam, we stop sending to that address.

Enquiries and replies. If you contact us through the site or reply to a newsletter, we keep your name, email address and message so we can answer.

Usage analytics. We record privacy-light, aggregate engagement signals, page views, scroll depth and clicks, against a pseudonymous, first-party visitor identifier, to understand which content is useful. We do not track you across other websites and we do not build individual advertising profiles.

Company identification. When you have accepted analytics, we send the network (IP) address of your visit to a third-party service (IPinfo) to infer, at an organisation level, the company a visit may come from: for example, that someone at a given firm read a page. We do the same when you click a link or a reaction button in one of our emails, because that click comes from your own device. We use this only to measure which organisations engage with our work, and we record the organisation name against the visit, not you as an individual. To avoid looking up the same address repeatedly, we keep each IP address with its result for up to 30 days, then delete it.

Security logs. Like most websites, our hosting provider records each request to the site, including your IP address and browser details, in logs we use to keep the site secure and working. These are kept for a short period and then deleted. To stop our forms being abused, we briefly count requests per IP address; those counts are deleted within 2 days. Failed sign-ins to our admin area are kept with the IP address for 1 day.

Cookies and consent

On the website, non-essential analytics and the company-identification lookup run only after you accept them via the consent banner (UK GDPR and PECR). Your choice is stored first-party in your browser. The essential storage needed to run the site and remember your subscription status is always on. We set no third-party advertising cookies.

Lawful basis

We rely on your consent for newsletter subscriptions (given on the form and confirmed by email), and for non-essential analytics and company identification on the website (given via the banner). An IP address can be personal data under UK GDPR, which is why that lookup waits for your consent and the address is kept only briefly. For the company lookup on clicks in our emails, and for the security logs and form protection described above, we rely on our legitimate interests in understanding which organisations read our newsletters and in keeping the site secure. A full data protection impact assessment will accompany launch.

Who we share data with

We use a small number of processors to run the service: IPinfo for company identification, our email provider for newsletter delivery, and our hosting and database providers. They act on our instructions under contract, and we never sell your data. Where a processor operates outside the UK or EEA, transfers are covered by appropriate safeguards such as the UK IDTA or Standard Contractual Clauses.

How long we keep it

Subscription data is kept until you unsubscribe. After that we keep a record that you unsubscribed, so that we don't email you again; ask us to delete it and we will. Unconfirmed sign-ups are deleted after 30 days. Engagement events are deleted after 13 months, and enquiries and newsletter replies after 2 years. IP addresses are kept only as described above: up to 30 days for the company lookup, 2 days for form protection, and a short period in the hosting provider's logs.

Your rights

You can request access to, correction of, or deletion of your data, object to processing, and withdraw consent at any time. To exercise any of these, use the contact form and say which right you are exercising. A notice has to offer a route, and this is the one that reaches us. You also have the right to complain to the Information Commissioner's Office (ICO).