Privacy policy

1. Who is responsible

Roost Editorial Works Ltd operates the website at reelroostteamtonsi.homes and is the data controller for personal data processed through it. Our registered address is Unit 6, Harlow Yard, 18 Fennimore Street, Bermondsey, London SE1 4XQ, United Kingdom. Privacy questions should be sent to [email protected] with "Privacy" in the subject line.

2. What we collect

Information you give us. If you use the contact form, we receive the name, email address, subject category and message you provide, plus the consent indication you give for a reply. If you email us directly, we receive whatever your message and mail headers contain.

Information collected automatically. Our hosting provider records standard server log data when a page is requested: IP address, date and time, the page requested, referring page, and browser and device identifiers. These logs exist for security, abuse prevention and diagnosing faults.

Information from cookies. Cookies and similar browser storage are described in full in our cookie policy. Essential storage records your cookie choice so the banner does not reappear. Analytics and functional cookies are used only where you have agreed to them through the banner.

We do not collect special category data, we do not knowingly collect data from children, and we do not sell personal data to anyone.

3. Why we process it, and on what legal basis

• To answer your message — our legitimate interest in responding to correspondence, and your consent where you tick the reply box.
• To keep the site available and secure — our legitimate interest in preventing abuse, detecting faults and protecting the service.
• To understand which guides are read — your consent, given through the cookie banner, where any measurement cookie is set.
• To meet legal obligations — compliance with applicable law, including responding to lawful requests.

4. Sharing and processors

We use a small number of service providers who process data on our behalf under written terms: a website hosting and content delivery provider, an email service provider that carries our correspondence, and, only if analytics consent is given, a website measurement provider. Processors act on our instructions and may not use the data for their own purposes. We may also disclose data where required by law, court order or a regulator, or to establish or defend legal claims.

5. International transfers

Some providers operate servers outside the United Kingdom and the European Economic Area. Where personal data is transferred internationally, we rely on an adequacy decision covering the destination, or on standard contractual clauses together with the UK addendum, and we assess whether additional safeguards are needed.

6. How long we keep it

Contact form messages and email correspondence are kept for as long as needed to deal with the enquiry and for a reasonable period afterwards in case the matter is reopened, then deleted. Server logs are kept for a short operational period before being deleted or aggregated. Cookie consent records are kept for the lifetime of the relevant cookie so that we can show your choice has been respected.

7. Your rights

If you are in the United Kingdom or the European Economic Area, the UK GDPR and the Data Protection Act 2018, or the EU GDPR as applicable, give you the right to access your data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting processing already carried out. You may also complain to a supervisory authority: in the United Kingdom this is the Information Commissioner's Office at ico.org.uk.

If you are a California resident, the California Consumer Privacy Act as amended gives you the right to know what personal information is collected, used, disclosed or sold, the right to request deletion, the right to correct inaccurate information and the right not to be discriminated against for exercising those rights. We do not sell or share personal information for cross-context behavioural advertising. Requests under any of these regimes can be sent to the privacy address above; we may ask for information to confirm your identity before acting.

8. Security

The site is served over an encrypted connection, access to correspondence is limited to editorial staff who need it, and we review our providers' security terms. No method of transmission or storage is completely secure, so we ask you not to send sensitive personal information through the contact form.

9. Changes

If this policy changes, the revised version will be published on this page. Material changes will be noted at the top of the page. Continuing to use the site after a change takes effect means the current version applies to you.