Privacy Policy.

1. Data Controller

The data controller for this website is Restan Letters, 63 Lamb's Conduit Street, London WC1N 3NB, United Kingdom. You may contact us at [email protected] or by telephone on +44 20 7193 4862 with any queries regarding your personal data.

2. What Data We Collect

We may collect and process the following categories of personal data:

• Contact form submissions: name, email address, and the content of your message when you use our contact form.
• Usage data: information about how you access and use the website, including your IP address, browser type, operating system, referring URL, and pages visited. This data is collected via cookies and similar technologies — see our Cookie Policy for details.
• Communications: records of any correspondence you send to us by email or post.

We do not collect special category personal data (such as health data, biometric data, or data revealing racial or ethnic origin) through this website.

3. Legal Basis for Processing

We process personal data on the following legal bases under UK GDPR:

• Consent: where you have given clear consent for us to process your data for a specific purpose, such as the placement of non-essential cookies.
• Legitimate interests: where processing is necessary for the purposes of our legitimate interests — specifically, the processing of an editorial publication and the maintenance of its website — except where such interests are overridden by your interests or fundamental rights.
• Contractual necessity: where processing is necessary to respond to your enquiry or to take steps at your request prior to entering into a correspondence or contributor arrangement.

4. How We Use Your Data

We use personal data collected through this website for the following purposes:

• To respond to enquiries and correspondence submitted through our contact form or by email.
• To analyse and improve the performance and usability of the website.
• To comply with legal obligations, including the retention of records where required by law.

We do not use personal data for automated decision-making or profiling. We do not sell, rent or trade personal data to third parties for marketing purposes.

5. Cookies and Tracking Technologies

This website uses cookies to support its processing and to help us understand how readers engage with our content. For full details of the cookies we use, their purpose, and how to manage your preferences, please refer to our Cookie Policy.

6. Data Sharing and Third Parties

We may share personal data with the following categories of third parties:

• Hosting and infrastructure providers who host and maintain the website on our behalf. These providers process data only on our instructions.
• Analytics providers who help us understand how visitors use the website. Where such services are enabled, they are subject to your cookie consent preferences.
• Legal or regulatory authorities where disclosure is required by applicable law.

We do not transfer personal data to countries outside the UK or EEA unless appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner.

7. Data Retention

We retain personal data only for as long as is necessary for the purposes set out in this policy, or as required by applicable law. Contact form submissions and related correspondence are typically retained for a period of up to two years. Usage and analytics data collected via cookies is subject to the retention periods specified in our Cookie Policy.

8. Your Rights

Under UK GDPR you have the following rights in relation to your personal data:

• The right to access the personal data we hold about you.
• The right to rectification of inaccurate personal data.
• The right to erasure of personal data in certain circumstances.
• The right to restriction of processing in certain circumstances.
• The right to data portability where processing is based on consent or contract.
• The right to object to processing based on legitimate interests.
• The right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month of receiving your request. If you are dissatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage. These measures include encrypted transmission of data via HTTPS, restricted access to personal data, and regular review of our security practices. No method of transmission over the internet is entirely secure; we cannot guarantee the absolute security of data transmitted to or from this website.

10. Links to Third-Party Websites

This website may contain links to third-party websites. This Privacy Policy applies only to this website. We are not responsible for the privacy practices of third-party websites and encourage you to review their respective privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when the policy was last revised. Continued use of this website after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

12. Contact

For any questions or concerns regarding this Privacy Policy or our handling of personal data, please contact us at [email protected] or write to us at Restan Letters, 63 Lamb's Conduit Street, London WC1N 3NB, United Kingdom.