1. Who we are
pickpantrystorypuls.makeup is operated by Pulsar Pantry Media Ltd, a company registered in England and Wales under company number 15873320, with its registered office at 14 Orion Way, Unit 3B, Manchester M4 6JQ, United Kingdom. For the purposes of the UK GDPR and the EU GDPR, Pulsar Pantry Media Ltd is the data controller. You can reach us at [email protected].
2. What data we collect
We collect as little as a website about books can manage. Specifically:
- Contact form data. When you write to us, we receive the name, email address, subject and message you provide.
- Technical data. Our hosting provider records IP address, browser type, referring page and pages requested in standard server logs.
- Analytics data. If you consent, we collect aggregated, pseudonymised data about which pages are read and for how long.
- Preference data. Your cookie choices, stored in your browser's local storage under the key
ppsp-cookie-consent.
We do not collect payment data, precise location, or any special-category data. We do not knowingly collect data from anyone under 16.
3. How we use your data
We use contact data to respond to your enquiry and for no other purpose. We use technical data to keep the site secure and available. We use analytics data to understand which reviews are useful so we can write better ones. Our legal bases are: your consent (analytics and functional cookies), our legitimate interests (security, replying to you, improving the site), and, where relevant, compliance with legal obligations.
4. Cookies
We use essential cookies to operate the site, and analytics and functional cookies only with your consent. A full list of every cookie, its purpose and its lifetime, along with browser opt-out instructions, is in our Cookie Policy. You can change your choice at any time by clearing the site's local storage in your browser, after which the consent banner will reappear.
5. Third-party processors
We share data only with processors who help us run the site, under written data-processing agreements:
- Netlify, Inc. — static hosting and server logs (United States, under the UK Extension to the EU–US Data Privacy Framework).
- Cloudflare, Inc. — content delivery, DDoS protection and bot mitigation.
- Plausible Insights OÜ — privacy-focused analytics hosted in the European Union, enabled only when you accept analytics cookies.
- Postmark (ActiveCampaign, LLC) — transactional email delivery for contact form submissions.
We never sell personal data, and we do not share it with advertisers or data brokers.
6. Your rights under GDPR
If you are in the UK or the European Economic Area, you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk) or your local supervisory authority. To exercise any right, email our Data Protection Officer using the details below. We respond within one month.
7. Your rights under the CCPA
If you are a California resident, you have the right to know what personal information we collect and how it is used, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as defined by the CCPA and have not done so in the preceding twelve months. We will not discriminate against you for exercising your rights. Requests may be made by email; we will verify your identity by confirming the email address associated with your request.
8. Retention
Contact form messages and our replies are retained for 24 months and then deleted. Server logs are retained for 30 days. Analytics data is aggregated on collection and holds no identifiers; aggregates are retained indefinitely. Your cookie preference persists in your browser for 12 months or until you clear it.
9. International transfers
Where data leaves the UK or EEA, we rely on adequacy decisions, the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, as appropriate.
10. Security
The site is served exclusively over HTTPS. Contact submissions are encrypted in transit and stored in access-controlled mailboxes with two-factor authentication. No method of transmission is perfectly secure, and we cannot guarantee absolute security.
11. Changes to this policy
We will post any changes on this page and update the date at the top. Material changes will be flagged on the home page for 30 days.
12. Data Protection Officer
Our Data Protection Officer can be contacted at [email protected] or by post at Data Protection Officer, Pulsar Pantry Media Ltd, 14 Orion Way, Unit 3B, Manchester M4 6JQ, United Kingdom.