Privacy Policy

1. About This Policy

Halven Journal is an independent editorial publication exploring everyday food habits, post-meal energy patterns, and afternoon alertness. The publication is not affiliated with any commercial, governmental, or institutional body.

This Privacy Policy explains how Halven Journal ("we", "us", "our") collects, uses, stores, and protects personal data submitted through this website (halven.info). It applies to all visitors and readers of this website.

We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using this website, you acknowledge the practices described in this policy.

2. Data Controller

The data controller responsible for your personal data is:

3. What Data We Collect

We collect personal data only when you actively provide it or when it is generated automatically through standard website functioning. The categories of data we may collect include:

• Contact form data: your name, email address, and the content of your message when you submit the contact form.
• Usage data: anonymised information about how you navigate the site, including pages visited, time on page, and browser type. This is collected via analytics tools and does not personally identify you.
• Cookie data: small data files stored on your device as described in our Cookie Policy.
• Technical data: IP address, browser version, operating system, and referring URL, retained in server logs for a period of 30 days for security and performance purposes.

We do not collect sensitive personal data (as defined by UK GDPR) and we do not collect data from children under 16.

4. How We Use Your Data

Personal data collected through this website is used for the following purposes:

• Responding to enquiries submitted via the contact form.
• Understanding how readers navigate the site so that we can improve its structure and content.
• Maintaining server security and diagnosing technical issues.
• Complying with legal obligations under applicable UK law.

We do not use your data for automated decision-making or profiling. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

5. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases to process your personal data:

• Legitimate interests: for analytics, site security, and improving our editorial content.
• Consent: for cookies where consent is required. You may withdraw consent at any time via the Cookie Settings link in the footer.
• Contract performance: when responding to a contact form submission constitutes fulfilling an implied agreement to reply.
• Legal obligation: where we are required to retain data by applicable law.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Contact form submissions: retained for up to 12 months and then securely deleted.
• Server logs: retained for 30 days and then automatically overwritten.
• Analytics data: retained in aggregated, anonymised form with no personal identifiers.

7. Third-Party Services

This website uses the following third-party services which may process data on our behalf:

• Google Analytics: anonymised website traffic analysis. Google's privacy policy governs their processing of this data.
• Google Maps: an embedded map on the contact page. Google's privacy policy applies to any data collected through this embed.
• Font providers: Google Fonts and Fontshare may log requests for font files as part of standard CDN functioning.

We have no control over the data practices of these third parties and encourage you to review their respective privacy policies.

8. Your Rights Under UK GDPR

As a data subject under UK law, you have the following rights:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate personal data.
• Right to erasure: to request deletion of your personal data where there is no legitimate reason to retain it.
• Right to restrict processing: to request that we limit how we use your data in certain circumstances.
• Right to data portability: to receive your data in a structured, commonly used format.
• Right to object: to object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration. These include HTTPS encryption on all pages, restricted access to server infrastructure, and regular review of our data handling practices. No transmission over the internet is entirely without risk; however, we take reasonable steps to protect the data you share with us.

10. Cookies

This website uses cookies. For full details of the cookies we use, their purpose, and how to manage your preferences, please refer to our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the website following any update constitutes acceptance of the revised policy. We recommend checking this page periodically.

12. Contact

For any questions about this Privacy Policy or our data handling practices, contact us at [email protected] or by post at 57 Hayne Street, London EC1A 9HT, United Kingdom.