Enquiry emails and their attachments are kept for 24 months and then removed from live systems. Access logs (IP, user-agent, page) live for 12 months. Newsletter subscriber records stay only as long as the reader is subscribed plus a 30-day grace window.
The site collects only what is necessary to run it: request logs at the CDN edge, cookie IDs for the consent banner, and anything you type into the contact form. We do not run behavioural profiling, we do not sell data to third parties, and we do not use dark-pattern cookie walls.
Cloudflare handles CDN and DDoS mitigation. Plausible Analytics runs an anonymised pageview counter. Cloudflare Turnstile shows on the contact form to block automated abuse. Their privacy documentation is linked in the cookie policy. None of our third-party processors receive personal data beyond what is strictly necessary to run their service, and all of them have UK/EU-adequate transfer agreements. The full list with legal basis is available on request via [email protected].
The personal data we hold is used to answer your enquiry, run the site securely and produce anonymised traffic statistics. That's the entire list. We do not build advertising audiences, we do not sell or rent data, and we do not enrich records against third-party sources. When you write to us the correspondence is filed under your email address and can be deleted at any point on request.
Only strictly necessary cookies fire before consent (banner state, load balancer). Analytics cookies fire only after you accept them. The full technical list lives on the Cookies page — it is short enough to read in one screen and updated whenever we change a tool.
Data queries: [email protected], subject 'Data controller'. Postal: Data Controller, Wintergate Media Ltd, 125 Colston Avenue, Bristol BS1 7ZG. ICO reference on request.
Material changes to this notice are announced on the site homepage 14 days before they take effect, and the effective date is shown under the H1 on this page. Non-material fixes (typos, clarifications) are logged in the change register but do not carry a homepage notice.