Privacy Policy

1. Who we are

ArterBlade Media Ltd (arterblade.com) is the data controller for personal data collected through this website. Registered office: Unit 33, T Dicken Industrial Estate, Station Road, Stokesley, North Yorkshire TS9 7AE, United Kingdom. Company number GB 601 9338 58. You can reach our privacy contact at [email protected].

This policy explains what we collect, why, how long we keep it and what rights you have under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

2. What we collect

• Technical and usage data (automatic): IP address (truncated where possible), browser type and version, device type, operating system, screen size, referring URL, pages viewed, time on page, scroll depth and clicks on outbound offer links.
• Advertising identifiers: click identifiers passed in the URL by advertising networks (for example Outbrain, Taboola, Meta or Google), used to attribute a visit to a campaign.
• Consent data: a record of the cookie choice you made, when you made it and the version of the notice shown.
• Correspondence: your name, email address and message content if you contact us.

We do not operate a checkout and do not collect payment card details, delivery addresses or order contents. Those are collected by the retailer under its own privacy policy. We do not knowingly collect data from anyone under 16 and do not seek special category data.

3. Why we use it and our lawful basis

• Operating and securing the website — legitimate interests (running a functioning, safe service and preventing fraud and abuse).
• Measuring advertising and conversions — your consent, where non-essential cookies or similar technologies are used.
• Improving content and layout — consent for analytics cookies; otherwise aggregated, non-identifying statistics.
• Answering your enquiries — legitimate interests, or steps prior to a contract where relevant.
• Meeting legal and advertising-code obligations — legal obligation.

4. Cookies and similar technologies

Non-essential cookies, pixels and local storage are only set after you give consent through our cookie banner. You can withdraw consent at any time by clearing this site's data in your browser, after which the banner will reappear. Full details, including categories and typical durations, are in our Cookie Policy.

5. Who we share data with

• Hosting and content-delivery providers who store and serve this website.
• Analytics providers that report aggregated traffic behaviour.
• Advertising and attribution partners, including native advertising networks and affiliate tracking platforms, so that a click can be matched to a campaign or a sale.
• Professional advisers, insurers and auditors where necessary, and public authorities where we are legally required to disclose.

We never sell personal data. Where a processor is used, a written contract under Article 28 UK GDPR is in place.

6. International transfers

Some providers process data outside the UK. Where that happens we rely on UK adequacy regulations or on the International Data Transfer Agreement / the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment. You may request a copy of the safeguards used by emailing [email protected].

7. How long we keep data

• Server and security logs: up to 12 months.
• Analytics and campaign attribution data: up to 14 months, then aggregated or deleted.
• Cookie consent records: 12 months from the date of the choice.
• Email correspondence: up to 24 months after the matter is closed, longer where a legal claim requires it.

8. Your rights

You have the right to be informed, to access a copy of your data, to rectification, to erasure, to restrict processing, to data portability, to object to processing based on legitimate interests or to direct marketing, and to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. We do not carry out automated decision-making producing legal or similarly significant effects.

To exercise a right, email [email protected]. We respond within one month and may extend by two further months for complex requests, telling you why. We may ask for information to verify your identity. There is no fee unless a request is manifestly unfounded or excessive.

9. Security

We use HTTPS across the site, restrict administrative access on a least-privilege basis, keep software patched and review our providers' security posture. No internet transmission is completely secure; we maintain a breach procedure and will notify the ICO within 72 hours and affected individuals where a breach is likely to result in a high risk to their rights.

10. Complaints

Please raise concerns with us first at [email protected]. You also have the right to complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, telephone 0303 123 1113, ico.org.uk.

11. Changes

We may update this policy to reflect changes in our practices or the law. The "last updated" date at the top shows the current version, and material changes will be highlighted on the homepage for 30 days.