Privacy Policy

At Mediamiclipcottage Ltd (referred to herein as "we", "us", or "our"), we are committed to safeguarding the privacy and personal data of visitors to mediamiclipcottage.quest. This Privacy Policy details our practices concerning data collection, lawful bases of processing, security controls, third-party data handlers, and your statutory rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the California Consumer Privacy Act (CCPA).

1. Data Controller Identification

The legal entity acting as the Data Controller for all data processing activities conducted through this website is:

2. Personal Data We Collect

We only collect personal information that is relevant and strictly necessary to provide access to our architectural makeover guides, facilitate direct inquiries, and ensure technical performance:

• Directly Provided Information: When you submit our contact form, we collect your full name, email address, topic classification, and message content.
• Automatically Collected Technical Telemetry: Anonymized Internet Protocol (IP) address, operating system, browser user agent, referral URL, and timestamps.
• Local Storage State: A single cookie consent flag stored in your browser's localStorage to record your banner choices.

3. Lawful Bases for Processing

Under UK GDPR Article 6, we process your personal data under the following legal frameworks:

• Consent (Art. 6(1)(a)): Where you provide opt-in consent for non-essential analytics cookies or marketing subscriptions.
• Contractual / Pre-contractual Necessity (Art. 6(1)(b)): To respond directly to consultation requests and professional inquiries submitted via our contact portal.
• Legitimate Interests (Art. 6(1)(f)): To maintain network security, protect our infrastructure against distributed denial-of-service (DDoS) abuse, and troubleshoot technical errors.

4. Third-Party Data Processors

We do not sell, rent, or trade your personal data. Data is shared strictly with authorized infrastructure service providers bound by Data Processing Agreements (DPAs):

• Hosting Infrastructure: Cloud hosting facilities operating secure servers within the UK and European Economic Area (EEA).
• Email Routing: Secure transactional SMTP providers enforcing TLS 1.3 encryption during message transit.

5. Data Retention Schedules

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Inquiry Records: Contact submissions are archived for up to 24 months to maintain business communication history, after which they are securely purged.
• Server Access Logs: Rotated and permanently deleted after 30 days.
• Cookie Preferences: Stored locally on your device until you clear your browser cache.

6. Your Statutory Rights (GDPR & CCPA)

Depending on your jurisdiction, you maintain comprehensive legal rights regarding your personal information:

• Right of Access: Request a complete copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your data where no overriding legal obligation exists.
• Right to Restriction & Objection: Object to specific processing activities based on legitimate interests.
• Right to Data Portability: Obtain your data in a structured, commonly used machine-readable format.
• Non-Discrimination: CCPA consumers will not experience altered service levels for exercising privacy rights.

7. Contact Our Data Protection Officer

To exercise any of your statutory rights or submit a privacy-related inquiry, please email us directly at [email protected] with the subject line "Data Protection Inquiry". We will respond to verified requests within 30 calendar days.