This Privacy Policy explains how Wholesome Ledger collects, uses, stores and protects information when you visit wholesomeledger.info, subscribe to editorial updates or contact our Bath office. It also describes the choices and rights available to people in the United Kingdom.
1. About this policy and who is responsible
1.1
Wholesome Ledger is the controller of personal information described in this policy. Our contact address is 58 Broad Street, Bath, BA1 5LN, United Kingdom. You may write to [email protected] or telephone +44 1225 481726 with privacy questions.
1.2
This policy applies to information collected through wholesomeledger.info and direct correspondence connected with the website. It does not govern websites operated by other organisations, even where we provide a link. Those organisations publish their own privacy information and make separate decisions about their handling practices.
1.3
We aim to collect only information that has a clear editorial, operational, security or communication purpose. We review collection points so that visitors are given relevant information before they submit details.
2. Information you provide
2.1
When you use the contact form, we may receive your name, email address, selected enquiry type, message and any details you choose to include. When you subscribe to the newsletter, we receive your name where requested, email address, consent record, subscription time and preference status.
2.2
If you contact us by telephone, email or post, we may retain the correspondence, associated contact details and notes required to respond. Please avoid sending sensitive personal information that is not necessary for the enquiry. We do not ask for payment card details because Wholesome Ledger does not sell products or accept payments through the website.
2.3
Website forms include required fields so that we can identify and respond to a request. Optional information is clearly separate. You may contact us through another listed channel if a form is not accessible to you.
3. Information collected during a visit
3.1
Our hosting and security systems may process internet protocol address, approximate region, browser type, device type, requested page, referring page, date, time and technical event records. This information supports reliable delivery, prevention of misuse and investigation of faults.
3.2
If you allow optional measurement cookies, we may collect aggregated information about page views, navigation paths, interaction with filters and general visit duration. We use this to understand which nutrition guides are useful and where navigation can be clearer. We do not seek to create detailed profiles of individual eating habits.
3.3
The Blog search and filters primarily operate within your browser. A search term may become part of the page address if you open a search link. Avoid entering private information into the search box.
4. Purposes and lawful grounds
4.1
We use contact information to answer enquiries, assess corrections, respond to accessibility feedback and maintain a record of editorial correspondence. This is generally based on our legitimate interest in operating a responsive publication and, where a request concerns a prior agreement, taking steps connected with that agreement.
4.2
We send newsletters only where you have actively asked to receive them. The lawful ground is consent. You may withdraw consent at any time by using the unsubscribe route in a message or contacting us. Withdrawal does not affect handling that occurred before the preference changed.
4.3
Technical event information is used for security, service continuity and fault resolution based on legitimate interests. Where optional storage requires consent, it remains inactive until the relevant choice is made. We may also keep information when required to meet a legal obligation.
5. Sharing and service providers
5.1
We may use carefully selected providers for website hosting, email delivery, form routing, security monitoring and basic audience measurement. A provider receives only the information reasonably required for its task and must protect it under written terms.
5.2
We do not sell personal information, rent subscriber lists or share contact details with advertisers for their own campaigns. We may disclose limited information if required by law, to establish or defend legal rights, to investigate significant misuse, or in connection with a genuine organisational restructuring where equivalent safeguards apply.
5.3
Some links lead to independent websites. Clicking such a link gives that site information such as the referring page and technical connection details. Review its privacy information before submitting personal details.
6. International transfers
6.1
A service provider may process information outside the United Kingdom. Where this occurs, we use an approved safeguard such as UK adequacy regulations, an applicable data bridge, the International Data Transfer Agreement or the UK Addendum to approved standard clauses.
6.2
We also assess the nature of the information, destination and provider controls. Additional measures may include encryption in transit, limited staff access and contract restrictions on further use.
6.3
You may ask for more information about the safeguard relevant to a particular transfer. Some commercial details may be withheld, but we will explain the core protection in a clear form.
7. Retention periods
7.1
Contact enquiries are ordinarily retained for up to twenty-four months after the last meaningful exchange, allowing us to follow up, identify repeated editorial issues and demonstrate how a request was handled. We may keep a shorter or longer record where context, legal duties or an active dispute reasonably require it.
7.2
Newsletter subscription records are kept while you remain subscribed. After you unsubscribe, we may retain a minimal suppression record so that the address is not accidentally re-added. Security event records are usually retained for a shorter operational period unless a specific incident requires preservation.
7.3
At the end of a retention period, information is deleted or anonymised so that it no longer identifies an individual. Backup copies are removed through the normal secure rotation cycle.
8. Security and access controls
8.1
We use proportionate technical and organisational safeguards including encrypted connections, restricted administrative access, account authentication, software maintenance, logging and recovery processes. Team access is limited to people who need information for a defined task.
8.2
No internet service can promise absolute security. We regularly review practical risks and adjust controls according to the nature and volume of information we hold. If a personal information incident creates a meaningful risk, we will assess notification duties and communicate with affected people when required.
8.3
Visitors can help by using current browser software, keeping devices secure and avoiding unnecessary private details in free-text forms.
9. Your UK data rights
9.1
Subject to conditions in UK data law, you may ask for access to personal information, correction of inaccurate details, deletion, restriction of use, objection to handling based on legitimate interests, or transfer of information you provided in a suitable electronic form.
9.2
Where use is based on consent, you may withdraw that consent. Where an important decision is made solely through automated processing, you may request human involvement and challenge the outcome. Wholesome Ledger does not currently use submitted visitor details for solely automated decisions with legal or similarly significant impact.
9.3
To make a request, contact [email protected]. We may ask for proportionate information to verify identity and clarify scope. We normally respond within one month, although complex or multiple requests may permit an extension. There is usually no fee, but the law permits a reasonable charge or refusal for clearly unfounded or excessive requests.
10. Complaints, changes and contact
10.1
Please contact us first if you have a concern so that we can review it promptly. You also have the right to complain to the UK Information Commissioner's Office. Current contact routes are available on the regulator's official website.
10.2
We may update this policy when website features, service providers, legal requirements or editorial practices change. The updated date at the top shows the latest revision. Material changes will be presented with appropriate prominence.
10.3
Privacy questions may be sent to [email protected], telephoned to +44 1225 481726, or posted to Wholesome Ledger, 58 Broad Street, Bath, BA1 5LN, United Kingdom. Our usual business hours are Monday to Friday, 09:00 to 17:30.
