Privacy Policy

Overview

Controller: ZypherLock LLC, trading as “Its My Britain”. We are committed to protecting your personal data and respecting your rights under the UK GDPR, the Data Protection Act 2018, and PECR.

This notice explains what we collect, why, how long we keep it, who we share it with, and the choices and rights you have.

Data we collect

• Account & profile: name, email, login identifiers, preferences.
• Submissions: content you send (e.g., corrections, proposed entries, civic letters), plus metadata (time, IP, device).
• Communications: messages you send us; support and moderation records.
• Usage: page views, referrers, approximate location (derived from IP), device & browser data, and interaction events for security and analytics.
• Technical: logs for error diagnosis, performance, and security (e.g., rate limiting, fraud/abuse prevention).
• Cookies: see our Cookies page for details and controls.

How we use your data

• Provide and improve the Site, features, and content quality.
• Moderate submissions; handle corrections and disputes.
• Secure the Site (detect/prevent fraud, abuse, and intrusions).
• Communicate with you (service updates, responses to enquiries, optional newsletters if you opt in).
• Analytics to understand aggregate usage and inform product decisions.
• Compliance with legal obligations and reasonable law-enforcement requests.

Our legal bases

• Contract — to provide requested services or features you use.
• Legitimate interests — running a secure, reliable, and informative website; preventing abuse; improving content; measuring reach (balanced against your rights).
• Consent — for optional analytics and newsletters; you can withdraw at any time.
• Legal obligation — to comply with applicable laws and regulatory requirements.

Sharing

We share personal data only as needed with trusted providers (e.g., hosting, email delivery, security, analytics) under contracts that protect your information. We also share data where required by law or to protect rights, safety, and security. We do not sell your personal data.

International transfers

Where personal data is transferred outside the UK (for example to the United States), we use appropriate safeguards such as government-approved standard contractual clauses or other lawful mechanisms.

Retention

We keep personal data only as long as needed for the purposes described or as required by law. Typical periods: account data (until deletion), submissions and moderation logs (as long as reasonably necessary for editorial integrity and audit), security logs (short rolling windows unless flagged), transactional emails (statutory or operational needs).

Your rights

• Access, rectification, and erasure of your personal data.
• Restriction or objection to certain processing.
• Data portability (where applicable).
• Withdraw consent at any time (for consent-based processing).
• Lodge a complaint with the UK Information Commissioner’s Office (ICO).

To exercise your rights, please use our contact page.

Cookies

We use essential cookies to operate the Site and, with your consent, may use optional cookies (e.g., analytics). See our Cookies page for details and controls.

Contact

Questions about this notice or your data? Please contact us via the contact page.