Privacy & Cookie Policy

1) Scope

This Privacy & Cookie Policy applies to this website and our related communications and services. It is designed to meet requirements under:

• UK GDPR and the UK Data Protection Act 2018
• EU GDPR (Regulation (EU) 2016/679)
• US privacy laws where applicable (including state privacy rights such as CCPA/CPRA)

2) Who We Are

Southern Ledger Publishing (“we”, “us”, “our”) is responsible for processing personal data described in this policy.

Contact: Please use our Contact page for privacy requests and questions.

3) Key Definitions

• Personal data: information that identifies or can identify a person.
• Processing: collection, use, storage, sharing, or deletion of personal data.
• Controller: entity determining how and why personal data is processed.
• Processor: entity processing data on behalf of a controller.

4) Information We Collect

We may collect:

• Contact details (name, email, phone, organisation) when you submit forms or contact us.
• Communication content (messages sent via forms or email).
• Technical data (IP address, browser type, device information, approximate location).
• Usage data (pages visited, interactions, referring URLs, session duration).
• Cookie preferences (your consent choices).

5) Lawful Bases (UK/EU GDPR)

We rely on one or more lawful bases, depending on context:

• Consent (e.g., non-essential cookies, certain marketing communications).
• Contract (steps prior to entering a contract or providing requested services).
• Legal obligation (compliance and regulatory requirements).
• Legitimate interests (running and improving our website and services, preventing fraud, ensuring security).

6) How We Use Personal Data

• To respond to enquiries and provide customer support.
• To operate, maintain, and improve website functionality and performance.
• To analyse traffic and usage patterns (where you consent to analytics cookies).
• To protect the website and users from security threats and misuse.
• To comply with legal and regulatory requirements.

7) Sharing & Disclosures

We may share personal data with:

• Service providers (hosting, analytics, communications) acting as processors under contract.
• Professional advisers (legal, accounting, insurance) where needed.
• Authorities if required by law or to protect rights and safety.

We do not sell personal information in the ordinary course of business.

8) International Transfers

Your data may be processed outside the UK/EU (for example, by hosting or analytics providers). Where this occurs, we use appropriate safeguards such as adequacy decisions, standard contractual clauses, and/or equivalent protective measures required by applicable law.

9) Data Retention

We keep personal data only as long as necessary for the purposes described in this policy, including to meet legal, accounting, or reporting requirements. Retention periods depend on the type of data and purpose.

10) Cookies & Similar Technologies

Cookies are small text files stored on your device. We use cookies and similar technologies to: (a) operate the site, (b) remember preferences, and (c) analyse usage (where consent is provided).

Managing Cookies

• You can manage cookies through your browser settings and by using any cookie controls provided on this site.
• Blocking some cookies may impact site functionality.
• If a cookie banner or settings panel is present, you can update preferences at any time.

11) Your Rights (UK/EU)

You may have the right to:

• Request access to your personal data
• Request correction or deletion
• Object to processing or request restriction
• Data portability (where applicable)
• Withdraw consent (where processing is based on consent)
• Lodge a complaint with your supervisory authority (UK ICO / EU authority)

12) US Privacy Rights

Depending on your US state of residence, you may have rights such as access, deletion, correction, and the ability to opt out of certain processing (e.g., targeted advertising or sharing as defined by law).

To submit a request, please contact us via the Contact page. We may need to verify your identity before completing requests.

13) Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. No system is 100% secure, but we continuously review our controls.

14) Children

This website is not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided personal data, please contact us so we can delete it.