Privacy Policy
Last updated: 1 January 2026
1. Who We Are
Galvorn Notebook is an independent editorial publication focused on everyday wellness practices. The publication is not affiliated with any commercial, governmental, or institutional body. Our registered office is at 54 Prior Street
For the purposes of UK data protection law, Galvorn Notebook is the data controller for personal data collected through this website. If you have any questions about how we handle your data, please write to [email protected].
2. What Data We Collect
We collect personal data only in the following circumstances:
- Contact form submissions: When you send a message via our contact form, we collect your name, email address, and the content of your message. We also collect the subject category you select.
- Email correspondence: If you write to us directly at [email protected], we retain your email address and the content of your message for the purpose of responding to your enquiry.
- Website analytics: We collect anonymised data about how visitors interact with our pages, including pages viewed, time spent, and general geographic region. This data does not identify you personally.
- Cookies: We use cookies to enable website functionality and, with your consent, to collect analytical data. You can manage your cookie preferences at any time using the Cookie Settings link in our footer. See our Cookie Policy for full details.
We do not collect sensitive personal data, financial data, or data about children. We do not require you to create an account to read our content.
3. How We Use Your Data
We use the personal data we collect for the following purposes:
- To respond to your messages: When you contact us, we use your name and email address solely to reply to your enquiry. We do not add your details to any mailing list without your explicit consent.
- To improve our website: Anonymised analytics data helps us understand which content is most useful to readers and where the site could be improved.
- To comply with legal obligations: We may retain records where required to do so under applicable law.
We do not use your data for automated decision-making or profiling. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.
4. Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases for processing personal data:
- Legitimate interests: Responding to reader correspondence and maintaining the security of our website.
- Consent: Analytics and non-essential cookies, where you have provided consent via our cookie banner.
- Legal obligation: Retaining records where required under applicable law.
5. How Long We Keep Your Data
Contact form submissions and email correspondence are retained for a maximum of 24 months from the date of receipt, after which they are permanently deleted unless there is an ongoing legal or editorial reason to retain them.
Anonymised analytics data is retained in aggregated form indefinitely, as it does not identify any individual.
6. Third-Party Services
Our website uses a small number of third-party services that may process data on our behalf:
- Hosting provider: Our website is hosted on a server located within the United Kingdom. We have a data-processing agreement in place with our hosting provider.
- Google Maps: Our contact page embeds a Google Maps iframe to show our location. Google may set cookies when this map is loaded. Please refer to Google’s privacy policy for details of how they handle data collected through their mapping services.
- Google Fonts: We use Google Fonts to serve typefaces. Google may log requests for font files. For details, see Google’s privacy policy.
- Analytics: If you have consented to analytics cookies, anonymised usage data is passed to our analytics provider. No personally identifiable information is included in these transmissions.
We do not use social media tracking pixels or third-party advertising networks on this website.
7. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may ask us to correct inaccurate personal data.
- Right to erasure: You may ask us to delete your personal data, subject to any legal retention requirements.
- Right to restrict processing: You may ask us to limit how we use your data in certain circumstances.
- Right to data portability: You may request a copy of your data in a structured, machine-readable format.
- Right to object: You may object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time by updating your cookie preferences or by contacting us.
To exercise any of these rights, please write to [email protected]. We will respond within one calendar month. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
8. Security
We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. Our website is served over HTTPS. Contact form submissions are transmitted securely.
No data transmission over the internet can be assured to be entirely secure. If you have concerns about the security of data you have sent to us, please contact us at [email protected].
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this page periodically to remain informed of how we handle personal data.
Continued use of this website after a policy update constitutes your acceptance of the revised terms.
10. Contact
If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal data, please contact us: