Who controls your information
Tinkerly Food Notes Ltd is the controller of personal information described in this policy. Our registered address is 27 Bramble Fold, Alderwick, Leeds, LS12 4QJ, United Kingdom. Privacy questions and rights requests may be sent to [email protected].
Information we collect
We collect information that you choose to provide through the contact form or by email. This may include your name, email address, selected subject, message and any other information you include. Please avoid sending sensitive personal data unless it is necessary for a specific request.
Technical systems used to deliver a website may process an internet protocol address, request time, requested page, browser information, device information, referring address and security events. These records support delivery, fault diagnosis, security and abuse prevention. We do not ask visitors to create an account.
Purposes and lawful bases
We use contact information to answer enquiries, consider corrections, respond to accessibility feedback and deal with legal requests. Depending on the circumstances, processing is based on our legitimate interests in operating and improving an editorial website, taking steps requested by you, compliance with a legal obligation, or consent where consent is the appropriate basis.
Security and server records are processed for legitimate interests in maintaining availability, investigating faults and preventing misuse. We balance those interests against the rights and expectations of visitors and limit the information used for those purposes.
Cookies and local storage
The site stores your cookie choice in your browser’s local storage so the banner can respect your selection. Optional categories are controlled through the preference panel. Further details, including category purposes and browser controls, appear in our cookie policy.
Processors and disclosure
Hosting, email and technical support providers may process limited information on our behalf. They are required to handle it under appropriate contractual, confidentiality and security terms. We may disclose information where required by law, to protect legal rights, to address fraud or security incidents, or in connection with a properly managed business reorganisation.
We do not sell personal information. We do not disclose contact details to certification bodies, food businesses or retailers merely because a message concerns them.
International transfers
A service provider may process information outside the United Kingdom. Where UK data protection law requires safeguards, we use an adequacy regulation, approved contractual terms or another lawful transfer mechanism. Visitors in the European Economic Area may also receive protections under the EU General Data Protection Regulation where it applies.
Retention
Contact correspondence is kept only for as long as reasonably needed to answer the request, maintain an appropriate record, resolve a dispute or meet a legal obligation. Routine technical records are retained for a limited operational period, while security records may be kept longer when needed to investigate an incident. Information is deleted or anonymised when its purpose expires, subject to lawful backup cycles.
Your rights
Under the UK General Data Protection Regulation and Data Protection Act 2018, you may have rights to access, correct, erase or restrict personal data, object to processing, receive portable data and withdraw consent. Rights depend on the context and may be subject to legal exceptions. You may complain to the UK Information Commissioner’s Office.
People covered by the EU GDPR may contact their relevant supervisory authority. California residents may have rights under the California Consumer Privacy Act, as amended, including rights to know, correct or delete covered information and to receive equal service when exercising rights. Because legal coverage depends on the organisation and processing, we will assess each request under the law that applies.
Security and changes
We use proportionate organisational and technical safeguards, but internet transmission cannot be guaranteed completely secure. We may revise this policy when services, legal requirements or processing practices change. Material changes will be presented on this page in clear language.