Privacy policy

This policy explains how Coeliac Everyday (“we”, “us”) handles personal data when you visit coeliaceveryday.co.uk or contact us. We aim to collect as little personal data as possible.

Who we are

The controller responsible for your personal data is Djuri van der Schaar, trading as Coeliac Everyday, based in the United Kingdom. Contact: contact@coeliaceveryday.co.uk.

Summary

• We don't use advertising or tracking cookies.
• We don't sell your data.
• We use Cloudflare Web Analytics, a privacy-focused analytics service that doesn't use cookies or store anything on your device.
• Our email newsletter is not yet live, so we do not collect sign-ups.

The data we process and why

1. When you visit the website

Like all websites, our hosting provider (Cloudflare, Inc. (Cloudflare Pages)) automatically processes technical information needed to deliver web pages and keep them secure. This includes your IP address, browser type, the pages requested and the date and time. This is held in server and security logs.

Lawful basis: our legitimate interests in running a secure, working website (UK GDPR Article 6(1)(f)). These logs are kept by the hosting provider for a limited period under their own retention policies.

2. Analytics

We use Cloudflare Web Analytics, provided by Cloudflare, Inc., to understand which pages are read and how quickly they load, so we can improve the site. Cloudflare acts as our processor.

What it collects: when a page loads, a small script sends Cloudflare the page address, the referring page (the site you came from, if any), your browser, operating system and device type, your approximate country (worked out from your IP address) and page-performance timings. We only see aggregated reports, such as numbers of visits and page views. We can't identify you from them.

What it doesn't do: according to Cloudflare, it does not use cookies, localStorage or any other storage on your device, does not “fingerprint” visitors using their IP address or browser details, and does not track individuals across websites. Cloudflare says it discards the IP address at its nearest data centre and does not store it in its analytics databases or logs.

Lawful basis: our legitimate interests in understanding how the site is used and keeping it fast (UK GDPR Article 6(1)(f)). Because nothing is stored on or read from your device for analytics, it doesn't need cookie consent. You can still object by emailing us, or block it with a content or tracker blocker.

3. When you email us

If you contact us, we process your name, email address and anything you include in your message, so we can reply and deal with your enquiry. Lawful basis: legitimate interests in responding to you (Article 6(1)(f)). We keep correspondence for up to 24 months after our last contact, unless we need it longer to deal with a complaint or legal matter.

Please don't send us sensitive health information. We can't give personal medical advice. If you choose to mention health details, we'll only use them to reply to you.

4. Email newsletter

Our newsletter isn't live yet and the sign-up form is switched off, so it collects no data. When we launch it, we will name the email provider here, explain how your data is used, and only add you with your consent.

Who we share data with

We only share personal data with service providers who help us run the site (our hosting provider, our analytics provider and our email inbox provider), and only as needed. We may also disclose data if the law requires it. We never sell personal data.

International transfers

Some of our providers may process data outside the UK, for example in the USA or the EU. Where this happens, we rely on appropriate safeguards recognised under UK data protection law, such as UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum.

Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you
• ask us to correct inaccurate data
• ask us to delete your data
• ask us to restrict how we use your data
• object to processing based on legitimate interests
• data portability, in some circumstances
• withdraw consent at any time, where we rely on consent

To exercise any of these rights, email contact@coeliaceveryday.co.uk. We will respond within one month.

Complaints

If you're unhappy with how we've handled your personal data, you can complain to us by emailing contact@coeliaceveryday.co.uk with “Data protection complaint” in the subject line. We will acknowledge your complaint within 30 days of receiving it, look into it without undue delay, keep you informed of progress and tell you the outcome.

You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint. The ICO usually expects you to raise the matter with us first.

Children

This website is intended for adults. We don't knowingly collect personal data from children.

Cookies

See our cookie policy.

Changes to this policy

We'll update this page if our practices change, for example if we launch the newsletter or add analytics, and we'll change the “last updated” date above.