Privacy Policy
How personal data is collected, processed, and safeguarded when accessing Steady Forty (steadyforty.xyz).
Last Updated: 23 September 2026 · Compliant with UK GDPR & DPA 2018
1. Data Controller Information
The data controller responsible for personal data collected through this website is Steady Forty, with editorial headquarters located at 45 St Martin's Lane, Covent Garden, London, WC2N 4JS, United Kingdom. Email: [email protected].
2. Personal Data We Collect
We collect minimal personal data necessary to operate our website and communicate with readers:
- • Direct Communications: When you send a message via our contact form or editorial email, we receive your name, email address, topic, and message content.
- • Newsletter Subscriptions: If you voluntarily subscribe to our reading list, we store your email address for dispatching digests.
- • Technical & Server Logs: Web hosting servers record standard connection data (IP address, browser user-agent, operating system, requested URL, timestamp) for security and uptime monitoring.
3. Lawful Bases for Processing (UK GDPR)
Under UK data protection law, we process personal data based on:
- • Consent: When you opt-in to receive our email newsletters.
- • Legitimate Interests: To respond to editorial queries, maintain website security, prevent spam, and ensure continuous technical performance.
- • Legal Obligation: To satisfy statutory, accounting, or regulatory requirements where applicable.
4. Cookies and Local Storage
We use minimal local browser storage to save your cookie banner choice so you are not prompted on each page visit. We do not use third-party tracking pixels or behavioral profiling cookies. For complete details, see our Cookie Policy.
5. Data Retention Periods
Contact messages are retained for up to 12 months to ensure resolution of enquiries, after which they are securely deleted. Newsletter emails are retained until you choose to unsubscribe. Server logs are automatically purged after 90 days.
6. Your Legal Data Rights
Under UK GDPR and the Data Protection Act 2018, you have the right to:
- • Access: Request a copy of the personal data we hold about you.
- • Rectification: Request correction of inaccurate personal data.
- • Erasure: Request deletion of your personal data ("Right to be Forgotten").
- • Restriction & Objection: Object to processing based on legitimate interests.
- • Withdraw Consent: Opt-out of newsletters at any time.
To exercise any of these rights, email our data privacy desk at [email protected].
7. Supervisory Authority Complaints
If you believe our data handling violates your rights, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.