Privacy Policy
What data we collect, why, and how to make us delete it.
Last updated: this page is maintained alongside the site. Material changes are noted here.
1. Summary
We collect as little as we can. We do not sell your personal data. We do not share it with advertisers.
2. What we collect
When you contact us or request a quote
Name, email address, company, and whatever you write in the message. We use it to answer you and, if we work together, to manage the engagement. Legal basis: steps taken at your request prior to entering a contract, and our legitimate interest in responding to enquiries.
When you subscribe to the newsletter
Your email address, and the fact that you opened or clicked an email. Legal basis: your consent. You can withdraw it from any email, in one click.
When you download a resource
Your email address, and which resource you requested. Legal basis: your consent.
When you comment
Your name, email address, comment text, and your IP address for spam prevention. Your name and comment are published; your email and IP are not.
When you simply read the site
Standard server logs — IP address, user agent, requested URL, timestamp — retained briefly for security and troubleshooting. Aggregate analytics with IP anonymisation enabled, used to understand which articles are read. Legal basis: legitimate interest in operating and securing the site.
3. Cookies
The site sets a small number of cookies. Strictly necessary ones keep the site working and your theme preference. Analytics cookies are only set where you have consented. You can clear or block cookies in your browser; strictly necessary ones are required for the site to function.
4. Who we share data with
Only processors who help us run the site — hosting, email delivery, analytics and CRM — under contracts limiting them to our instructions. We do not sell personal data, and we do not share it for cross-context behavioural advertising. That means we have no “sale” or “sharing” for you to opt out of under the CCPA/CPRA, though your other rights below still apply.
5. How long we keep it
- Enquiry and client correspondence: for the duration of the relationship and up to six years afterwards where required for legal or tax reasons.
- Newsletter subscription: until you unsubscribe.
- Comments: until you ask us to remove them.
- Server logs: a short rolling window.
6. Your rights
Depending on where you live, you have the right to access your data, correct it, delete it, restrict or object to processing, port it elsewhere, and withdraw consent at any time. You also have the right to complain to your data protection authority.
To exercise any of these, email privacy@tokenpr.net. We respond within one month. We will not discriminate against you for exercising a privacy right.
7. International transfers
Some processors operate outside your country. Where data leaves the UK or EEA we rely on adequacy decisions or standard contractual clauses.
8. Children
This site is not directed at children under 16 and we do not knowingly collect their data.
9. Security
The site is served over HTTPS with HSTS. Access to personal data is limited to staff who need it. No system is perfectly secure, and we will notify you and the relevant authority of a breach where the law requires it.
10. Contact
Privacy enquiries: privacy@tokenpr.net.