1. Controller and privacy contact
Showzacheerdck Research Ltd, company number 16874293, is the publisher and controller for personal information it receives through this website and related enquiries. Our registered address is 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Contact our privacy lead at [email protected]. This is also our DPO contact channel for data-protection enquiries; the designation of a contact channel does not imply that a statutory Data Protection Officer appointment is required.
2. Information we collect
The website does not offer accounts, payments, advertising profiles or an embedded AI chat service. Reading the guides does not require you to identify yourself. Hosting infrastructure may process ordinary request information, including IP address, requested URL, browser information, timestamps and error details, to deliver and protect the site.
The contact form validates information in your browser and prepares an email draft. It does not send form fields to a website server or save them in local storage. If you choose to send the email through your mail application, we receive your name, email address, optional organisation, selected subject and message, together with normal email metadata. Please do not send passwords, payment details or sensitive personal information.
3. Purposes and legal bases
We use correspondence to answer questions, investigate corrections and maintain relevant business records. Our usual lawful basis under UK GDPR is legitimate interests in communicating with readers and operating a secure publication. Where your enquiry concerns entering a contract, necessary pre-contractual steps may provide the basis. We may retain or disclose information to comply with a legal obligation. Optional tracking, if introduced, would require a separate assessment and consent where applicable; it is not currently installed.
4. Cookies and third-party processors
A first-party local-storage record remembers your privacy settings. It contains category choices, a policy version and a timestamp, not your contact details. No analytics scripts, third-party fonts, advertising pixels or embedded maps are included. See the cookie policy for the storage inventory and controls.
Hosting and email service providers may process technical information and correspondence on our behalf under applicable contractual safeguards. We do not sell or rent personal information. We may share relevant records with professional advisers or authorities when necessary and lawful. External links lead to independent providers; visiting those sites subjects your activity there to their own policies. Where a processor transfers personal information internationally, applicable adequacy decisions or approved contractual safeguards are required.
5. Retention and security
Routine enquiries are normally retained for up to 12 months after the last meaningful contact, unless an ongoing matter requires longer. Records needed for legal claims or statutory obligations may be retained for the relevant legal period. Technical security logs should be limited to the period necessary for diagnosis and protection, ordinarily no more than 90 days unless an incident requires preservation. Privacy choices expire in the site’s logic after 180 days and can be removed earlier through browser settings.
We use proportionate access controls and restrict information to those who need it. No website or email system can guarantee absolute security. Contact us promptly if you believe personal information has been exposed or sent to us in error.
6. Your GDPR and California rights
Subject to applicable conditions, UK and EEA residents may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. You may withdraw consent without affecting earlier lawful processing. We normally respond within one month, with any lawful extension explained. You can complain to the UK Information Commissioner’s Office or your local supervisory authority.
Where the CCPA, as amended by the CPRA, applies, California residents may request access to categories and specific pieces of information, deletion and correction, and opt out of sale or sharing. We do not sell personal information or share it for cross-context behavioural advertising. We do not discriminate against people exercising privacy rights. Authorised agents may submit requests with appropriate evidence, and we may proportionately verify identity. Applicable California requests are generally answered within 45 days, subject to permitted extensions.
7. Children and changes
This publication is intended for a professional audience and does not knowingly solicit children’s personal information. Contact us if a child has provided information so we can assess deletion. Material changes to our processing will be reflected in this policy and, where necessary, a renewed notice or consent request. The effective date above identifies this version.