Identity and contact details of the controller
The controller of personal data in relation to this public website and to enquiries sent through the contact form is Phakronxrrthrele. Our postal address for formal notices and general correspondence in the United Kingdom is 489 Oxford St, London W1C 2AU. Our website is contact@phakronxrrthrele.world and telephone +44 20 7491 8444 during the studio’s published hours, which may be updated on the Contact page. We are not required to appoint a data protection officer for all processing we carry out; if that changes, we will publish a named contact in this section.
Categories of personal data we process
When you only browse the site
Our hosting environment may process technical and usage data, including the IP address your provider assigns, browser type, operating system, referring URL, time of request, and page paths. This information helps us maintain security, prevent abuse, and understand which parts of the site are read. We do not use this data to name you in day-to-day operations unless a security investigation requires it and the law allows.
When you use the contact form
If you choose to message us, we collect the fields you type (typically your name, email, and the body of the message) and the fact that a submission occurred. We may also see a rough technical record that helps prevent spam, such as a challenge outcome or a risk score, depending on the tools we add from time to time, which will be listed here when live.
When you set cookie preferences
The cookie banner and settings panel use browser storage; see the cookie policy for detail. The stored preference is not a message from you, but is linked to the browser and device you used.
Special category data
We do not ask you to send health, biometric, or other special category data through the public website. If you include such data in a free-text message, we will delete the parts we do not need to answer you and will not use them to profile you. Please avoid sending medical information through the form.
Purposes and lawful bases of processing
We process name, email, and message content in the contact form to reply to your request, which is a step at your request before a possible contract, or, where the law is clearer, our legitimate interests in handling correspondence, balanced against your rights. We process technical logs in part on the basis of legitimate interests in a secure, available site, and, where a processing activity requires consent, for example to optional non-essential cookies, we will obtain it through the dedicated controls. Where we are legally obliged to retain certain records, we will point to the obligation, such as for accounting or a regulator’s request, as the basis to retain after the initial purpose ends.
How long we keep data
In ordinary circumstances, we keep contact form messages and related email threads for up to twenty-four months after the last message in a conversation, unless a longer period is required for a genuine legal claim, a regulatory investigation, an unresolved complaint, or where a court order applies. After that, we delete or aggregate so that the record no longer identifies you. Server and security logs that may contain personal data in technical form are kept on short rolling windows defined with our host, with a design goal of not exceeding half a year where feasible. Marketing-related records, if you join a list in the future, are kept for the life of the subscription and a short period afterwards to respect unsubscribe requests, unless you are told otherwise in that service’s terms.
Security measures and processors
We use hosting and email service providers vetted for reasonable industry practice, including encryption in transit (HTTPS) for the public site, access controls to reduce who can read messages, and instructions to our team to use only business email accounts to handle your enquiry. We do not sell your personal data. Where a processor in another country can access UK or EEA personal data, we use appropriate transfer mechanisms such as the UK International Data Transfer Agreement or the EU standard contractual clauses with the UK addendum, as the UK government validates them from time to time, and we carry out a transfer risk assessment where the law requires.
Automated decision-making and profiling
We do not make decisions that produce legal or similarly significant effects for you solely by automated means with no human involvement. A future anti-spam tool may assign a score to a form submission; you can object or ask for human review in line with the rights below if such a system affects you.
International aspect
Our primary market is the United Kingdom. If you are in the EEA, Switzerland, or another jurisdiction, you may have rights under both local law and, where the UK text controls our relationship, this policy, without reducing mandatory protections in your own country to consumers.
Your rights and how to exercise them
Under the UK GDPR, subject to the conditions in the law, you have the right to:
- access a copy of the personal data we hold about you;
- ask us to correct inaccurate data or to complete incomplete data;
- ask us to erase data where the law allows;
- ask us to restrict certain processing where the law allows;
- receive machine-readable data you gave us in a structured form, in some cases, and to have it sent to another controller;
- object to processing based on legitimate interests or for direct marketing;
- withdraw consent to consent-based processing, without affecting the lawfulness of earlier use;
- lodge a complaint with the ICO or, if you are in the EEA, your local authority.
To exercise a right, email or write to the addresses above, describe your request clearly, and, if you ask for access, tell us a secure way to verify your identity. We respond within one month in most cases, or we explain a permitted extension. There is no fee unless your request is manifestly unfounded or excessive.
Children
Our public pages are for adults who read about food and lifestyle information. We do not run a service that targets children. If you believe we have personal data of a child without appropriate permission, ask us to delete it and we will respond promptly after verification.
Changes to this policy
The reference date in the hero section of this page is generated in your browser when you open it, so you can see the live calendar day, month, and year. The substantive “last policy review” note may be mentioned in a future revision list on this page or in a short annual statement on the website. We encourage you to check back after material updates to the site or to the law, such as new guidance from the ICO.
Further reading and links
Cookie policy · Terms of use · Return policy · Contact the studio. For a deeper introduction to the UK GDPR, see the ICO’s guide (link current at time of writing; the ICO may move pages).