Privacy policy

1. Who is responsible

The data controller is Larkhill Sheet Media Ltd, Mereside House, 27 Larkhill Street, Withington, Manchester M20 4RA, United Kingdom. Questions about this policy or about your data should be sent to [email protected]. We have not appointed a statutory data protection officer because the scale of our processing does not require one, but the same address handles all privacy matters.

2. What we collect

When you browse the site, our hosting provider records standard server logs: the IP address of the requesting device, the page requested, the time of the request, the referring page and the browser's user-agent string. These logs are used for security, capacity planning and diagnosing faults.

When you use the contact form, we collect the name, email address, subject and message you enter, together with your confirmation that we may reply. We use this information only to deal with your enquiry and to keep a record of corrections applied to the site.

When you make a choice on the cookie banner, we store that choice in your browser's local storage so that the banner does not reappear on every visit. This stores your preference, not your identity.

3. Cookies and similar technologies

The site uses essential storage to remember your cookie choice, and may set analytics and functional cookies if you allow them in the Preferences panel. The categories, their purposes and how to withdraw consent are set out in the cookie policy, which forms part of this privacy policy.

4. Legal bases

Under the UK General Data Protection Regulation and the Data Protection Act 2018, we rely on legitimate interests for server logs and site security, on consent for non-essential cookies, and on legitimate interests in running an accurate publication for handling correspondence and corrections. Where you are in the European Economic Area, the same bases apply under the EU General Data Protection Regulation.

5. Processors and sharing

We use a web hosting provider to serve the site and store logs, and an email provider to receive and store correspondence. Both act as processors on our written instructions. If analytics cookies are enabled with your consent, the analytics provider named in the cookie policy processes usage data on our behalf. We do not sell personal data, and we do not share it with advertisers. We will disclose data where the law requires it, for example in response to a valid order from a court or regulator.

6. International transfers

Some of our processors may store data outside the United Kingdom. Where that happens we rely on the UK's adequacy regulations, the International Data Transfer Agreement, or standard contractual clauses approved for the purpose, so that the data is protected to a standard equivalent to UK law.

7. Retention

Server logs are kept for no longer than ninety days unless a security incident requires longer investigation. Contact form correspondence is kept for up to two years from the last exchange, then deleted, except where a message led to a published correction, in which case the message is kept for as long as the correction remains on the site. Your cookie choice remains in your browser until you clear its storage or change the choice.

8. Your rights

You have the right to access the personal data we hold about you, to have inaccurate data corrected, to have data erased where there is no continuing reason to keep it, to restrict or object to processing based on legitimate interests, to receive your data in a portable format, and to withdraw consent at any time without affecting processing that took place before withdrawal. To exercise any of these rights, email [email protected]. We respond within one month, extendable by two further months for complex requests, and we will tell you if that is necessary.

If you are unhappy with how we have handled your data, you may complain to the Information Commissioner's Office, the UK supervisory authority. Residents of the European Economic Area may complain to their local supervisory authority.

9. California residents

If you are a California resident, the California Consumer Privacy Act gives you the right to know what personal information we collect, to request its deletion, and to opt out of any sale or sharing. We do not sell or share personal information as those terms are defined in the Act. Requests may be made to the email address above and we will not discriminate against you for making one.

10. Children

This site is not directed at children under sixteen and we do not knowingly collect their data. If you believe a child has sent us personal data, contact us and we will delete it.

11. Changes

We may update this policy when our processing or the law changes. The current version is always at this address, and material changes will be flagged on the home page for a reasonable period.