Privacy & Data Outline

This page explains how Heritage City Atlas collects, uses and stores information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It also sets out your choices and the easiest ways to reach us.

Who we are

Heritage City Atlas — UNESCO England, 9 Castle Hill, Lancaster LA1 1YN, England. Email: [email protected]. Phone: 441 524 739 864.

What we collect

• Contact messages: name, email, optional phone, and the text you send us.
• Usage data: basic analytics showing page views, referrers and time on page. These analytics are privacy-minded and do not build advertising profiles.
• Cookies: essential cookies for site operation and preference cookies for your choices (see Cookies & Settings).

Why we collect it

• To respond to messages you send.
• To operate and improve the site (performance, readability, navigation).
• To record consent choices about cookies and similar technologies.

Legal bases (UK GDPR)

• Legitimate interests: running a functional website, understanding which pages are read and fixing errors.
• Consent: for non-essential cookies or analytics that require it. You can withdraw consent at any time via Cookies & Settings.
• Contract: when you ask us to provide specific information you requested by email.

How long we keep data

Contact messages are kept while they remain relevant to your request. Routine inbox tidy-ups remove old threads that no longer need to be held. Preference cookies last only as long as indicated in the Cookies & Settings page.

Sharing

We do not sell personal data. Service providers that support hosting and analytics may process limited information on our behalf under written terms and standard security practices. They do not receive permission to use your data for unrelated purposes.

International transfers

When information leaves the UK, appropriate safeguards are applied, such as the UK Addendum to the EU Standard Contractual Clauses or an equivalent lawful mechanism.

Your rights

• Access your data and receive a copy.
• Rectify inaccuracies.
• Erase data when it is no longer needed and no legal reason requires retention.
• Restrict or object to certain uses based on legitimate interests.
• Withdraw consent where consent was the basis.
• Portability for data you provided to us, where feasible.

To use these rights, email [email protected]. We will reply as soon as we reasonably can.

Security

We apply reasonable measures to reduce risks: limited access, strong account hygiene, and minimal collection. No internet service can remove all risk, so please do not include sensitive details in optional fields.

Children

The site is aimed at general visitors. If a message appears to be from a child and requires special handling, we respond in a proportionate way and avoid storing more data than needed to handle the request.

Complaints

If you have concerns, contact us first. You can also raise a concern with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Changes

When we update this outline, the “Last updated” note will change.

Last updated: 19 October 2025