Privacy Policy

1. Scope and Identity of Controller

This Privacy Policy governs the processing of personal data by Quirkpickindx Maritime & Coastal Media Ltd. (referred to herein as "Quirkpickindx", "we", "us", or "our"), incorporated under company number OC419824, with registered offices situated at 48 Marina Terrace, Quay Quarter, Falmouth, Cornwall, TR11 3XQ, United Kingdom.

We operate the website located at quirkpickindx.bond. We are committed to processing your personal data lawfully, transparently, and strictly in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the EU GDPR (Regulation (EU) 2016/679), and applicable international privacy frameworks including the California Consumer Privacy Act (CCPA/CPRA).

2. Data Collection and Information Gathered

We collect and process minimal categories of personal information to provide technical coastal documentation, geographical map interactions, and client correspondence:

• Direct Voluntary Communications: When you submit our correspondence form on our contact page, we collect your full name, email address, topic category, subject line, and the verbatim contents of your message.
• Technical Protocol Metadata: When you load our static pages, our hosting infrastructure automatically logs non-identifying server telemetry including truncated IP address (anonymized at subnet level), user-agent string, browser version, operating system, referencing URL, and timestamp.
• Client-Side Storage State: We store your affirmative cookie consent preferences within your browser’s local storage (localStorage) to suppress redundant notification banners on subsequent page loads.

3. Lawful Bases for Processing under GDPR

In accordance with Article 6 of the UK/EU GDPR, we process personal data under the following legal bases:

• Consent (Art. 6(1)(a)): For non-essential functional cookies or analytical metrics when you explicitly provide consent via our consent interface.
• Performance of a Contract or Pre-Contractual Steps (Art. 6(1)(b)): To review, process, and respond to direct inquiries submitted via our contact forms or editorial correspondence.
• Legitimate Interests (Art. 6(1)(f)): To maintain network security, mitigate malicious cross-site scripting or distributed denial of service attempts, and debug static asset delivery across our content delivery network.

4. Third-Party Subprocessors and Data Transfers

Quirkpickindx does not sell, rent, monetize, or lease your personal data to data brokers, marketing conglomerates, or behavioral advertising platforms. We transfer limited operational data solely to trusted infrastructure subprocessors:

• Hosting and Content Delivery Providers: Static site edge servers delivering encrypted HTTPS assets across international points of presence.
• Email Transmission Relays: Encrypted enterprise email gateways handling inbound queries dispatched to [email protected].

Where transfers outside the UK or European Economic Area take place, we ensure adequacy decisions apply or that standard contractual clauses (SCCs) and the UK International Data Transfer Addendum are executed to ensure an equivalent level of protection.

5. Data Retention Schedules

We retain personal data strictly for as long as is necessary to satisfy the purposes set out in this document:

• Contact form inquiries are retained in secure operational archives for twelve (12) calendar months following the closure of the matter, after which they are permanently purged.
• Automated server diagnostic logs are automatically rotated and deleted after thirty (30) calendar days.
• Local browser preferences remain client-side until manually cleared by you or overwritten upon expiration after twelve (12) months.

6. Your Statutory Rights (GDPR & CCPA)

Subject to statutory verifications, users located in the UK, EEA, and relevant US states enjoy substantial legal rights:

• Right of Access (Art. 15 GDPR): You may request confirmation and copies of any personal data we hold regarding you.
• Right to Rectification (Art. 16 GDPR): You may request prompt correction of inaccurate or incomplete contact records.
• Right to Erasure (Art. 17 GDPR): You may request the permanent deletion of personal data where no overriding statutory retention obligation exists.
• Right to Restrict or Object to Processing (Arts. 18 & 21 GDPR): You may contest processing conducted under legitimate interest grounds.
• Right to Data Portability (Art. 20 GDPR): You may request your data in a structured, machine-readable format.
• California Consumer Rights: California residents hold the right to know what personal data is collected, request its deletion, and be free from discriminatory treatment for exercising privacy rights.

7. Data Protection Officer (DPO) and Inquiries

To exercise any statutory right, request clarification regarding our telemetry, or lodge an inquiry regarding data management, please contact our Data Governance Officer: