Who we are
The controller of personal data processed on commentonline.co.uk is commentonline.co.uk. The controller decides why and how your personal data is used. You can reach us at [email protected].
Data we collect
Contact form and email
Your name, email address, the subject and content of your message, and any other details you choose to share with us.
Newsletter
Your email address and the date you subscribed, if you sign up for updates.
Cookies and technical data
Your cookie preference, basic server logs (such as IP address, browser type and time of request) and, only with your consent, aggregated analytics about pages visited.
We do not knowingly collect special category data, and the site is not directed at children.
Purposes and legal basis
We only use personal data where we have a lawful basis under UK GDPR:
Replying to your messages
Data you send through the contact form or by email, so we can answer your enquiry.
Legal basis
Legitimate interests (Article 6(1)(f) UK GDPR) in responding to correspondence.
Sending the newsletter
Your email address, if you subscribe, so we can send you new articles.
Legal basis
Consent (Article 6(1)(a) UK GDPR), which you can withdraw at any time.
Analytics
Aggregated statistics about how the site is used, only after you accept analytics cookies.
Legal basis
Consent (Article 6(1)(a) UK GDPR and PECR).
Running and securing the site
Technical data such as server logs, to keep the site available and protect it from abuse.
Legal basis
Legitimate interests (Article 6(1)(f) UK GDPR) in operating a secure website.
How long we keep data
- Contact messages: until your enquiry is resolved, and then for up to 12 months in case of follow-up questions.
- Newsletter: until you unsubscribe, after which your address is removed.
- Cookie preference: stored in your browser until you change it or clear your site data.
- Server logs: kept for a short period, usually no longer than 30 days.
We may keep data for longer only where the law requires us to.
Who we share data with
We never sell your personal data. We share it only with service providers who help us run the site and act on our instructions, such as:
- hosting and content delivery providers;
- email and newsletter providers;
- analytics providers, only if you accept analytics cookies.
Some providers may process data outside the UK. Where that happens, we rely on UK adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. We may also disclose data where required by law.
Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have your data erased;
- restrict how we use your data;
- object to processing based on legitimate interests;
- receive your data in a portable format (data portability);
- withdraw consent at any time, without affecting processing carried out before withdrawal.
To exercise any of these rights, contact us using the details below. We will respond within one month. Exercising your rights is free of charge in most cases.
Complaints
If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the UK supervisory authority, the Information Commissioner’s Office (ICO), at ico.org.uk/make-a-complaint or by phone on 0303 123 1113.
Contact us
For any questions about this policy or your personal data, use the contact page or email [email protected]. We may update this policy from time to time; the date at the top shows the latest version.