Privacy Policy

1. Who We Are

Kelbrath Journal is an independent editorial publication focused on everyday wellness practices. The publication is not affiliated with any commercial, governmental, or institutional body. The data controller responsible for your personal information is Kelbrath Journal, 91 Rivington Street, EC2A 3AY London, United Kingdom.

For all privacy-related enquiries, you may contact us at [email protected] or by post at the address above.

2. What Information We Collect

We collect personal information in the following circumstances:

3. Legal Basis for Processing

We process your personal information under the following legal bases as defined by the UK General Data Protection Regulation (UK GDPR):

• —Consent: Where you have given your explicit consent, such as accepting analytics cookies through our cookie consent banner.
• —Legitimate interests: For the security and performance monitoring of our website, and for responding to contact form submissions where no other legal basis applies.
• —Legal obligation: Where we are required to retain or disclose information to comply with applicable law.

4. How We Use Your Information

Personal information collected through this website is used for the following purposes:

• —To respond to enquiries submitted via the contact form
• —To monitor and maintain the security and performance of our website
• —To understand aggregate patterns of content engagement, where analytics cookies have been accepted
• —To comply with applicable legal obligations

We do not use your personal information for automated decision-making or profiling in a way that produces legal or similarly significant effects.

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information to third parties. We may share information in limited circumstances:

• —Service providers: We use third-party services to operate this website, including web hosting, analytics (where consented), and content delivery. These providers access only the data necessary to perform their services and are contractually bound to handle it appropriately.
• —Legal requirements: We may disclose information where required by law, court order, or regulatory authority.

6. Data Retention

We retain personal information only for as long as necessary for the purpose for which it was collected:

• —Contact form submissions: retained for up to 12 months from the date of receipt, unless an ongoing correspondence requires longer retention
• —Server access logs: retained for up to 90 days for security purposes
• —Analytics data: retained in aggregate, anonymised form; individual session data is not retained beyond the analytics platform's standard retention window

7. Your Rights Under UK GDPR

As a data subject under UK GDPR, you have the following rights:

• —Right of access: You may request a copy of the personal information we hold about you.
• —Right to rectification: You may request correction of inaccurate or incomplete personal information.
• —Right to erasure: You may request deletion of your personal information where we have no legitimate reason to continue holding it.
• —Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
• —Right to data portability: Where processing is based on consent or contract, you may request a copy of your data in a structured, machine-readable format.
• —Right to object: You may object to processing based on legitimate interests, including for direct marketing purposes.
• —Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes the use of HTTPS encryption for all data in transit. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

9. International Transfers

Where we use third-party service providers that process data outside the United Kingdom, we ensure appropriate safeguards are in place, such as UK adequacy decisions or standard contractual clauses, to protect the transfer of your personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will note the updated date at the top of this page. We encourage you to review this policy periodically. Your continued use of the website following any changes constitutes your acknowledgement of the updated policy.