1. Data Controller Identification
This Privacy Policy governs the processing of personal information collected by Vaultsparadefeed Travel Media Ltd (referred to herein as "Vaultsparadefeed", "we", "our", or "us"), a company registered under number 14892014, with registered offices at 74 Pall Mall, St. James's, London, SW1Y 5ES, United Kingdom. We operate the travel publication platform available at vaultsparadefeed.bond. For inquiries relating to this policy, you may contact our appointed Data Protection Officer at [email protected].
2. Scope and Categories of Data Collected
We adhere strictly to principles of data minimisation. Depending on how you interact with our Mediterranean Sun Atlas, we may collect the following classes of data:
- Communication Data: Name, email address, topic category, and message text submitted when using our inquiry and feedback forms.
- Technical Telemetry Data: Truncated IP address, browser user-agent header, language preference, referring URL, and page timestamps, collected to prevent cyber threats and monitor infrastructure performance.
- Preference Data: Records of your consent selections regarding cookies, maintained in your local browser storage.
3. Legal Bases for Processing (UK GDPR / EU GDPR)
We process personal data solely in accordance with statutory conditions set forth under Article 6 of the General Data Protection Regulation:
- Consent (Art. 6(1)(a)): Explicit consent provided when choosing to submit a contact inquiry or approving non-essential analytical cookies.
- Legitimate Interests (Art. 6(1)(f)): Maintaining network integrity, preventing abusive form submissions, and ensuring our editorial servers respond efficiently across international network paths.
- Legal Obligations (Art. 6(1)(c)): Complying with statutory corporate, tax, and regulatory recordkeeping duties.
4. Third-Party Service Providers and Processors
Vaultsparadefeed does not sell, rent, or trade your personal information. We work solely with certified third-party infrastructure providers who process data strictly under Data Processing Agreements (DPAs) compliant with standard contractual clauses:
- Cloud Infrastructure: Secure web hosting, server caching, and static content delivery networks located within the UK and European Economic Area (EEA).
- Email Routing: Secure SMTP relay infrastructure utilized to deliver messages initiated via our contact forms directly to our editorial desk.
5. Data Retention Schedules
Personal data is retained only for as long as necessary to fulfill the specific operational purpose for which it was gathered:
- Contact Enquiries: Retained for a maximum of 180 days following the resolution of your communication, after which records are permanently purged.
- Server Logs: Raw server access logs containing truncated IP stamps are rotated and overwritten on a rolling 30-day schedule.
- Consent Preferences: Local storage flags remain on your device for up to 365 days or until you clear your browser cache.
6. Your Rights Under GDPR and CCPA
Under relevant data privacy frameworks (including the UK Data Protection Act 2018, EU GDPR, and the California Consumer Privacy Act), you retain defined rights regarding your information:
- Right of Access: You may request formal confirmation and copies of personal data we retain regarding your profile.
- Right to Rectification: You may request correction of inaccurate or incomplete personal records.
- Right to Erasure ('Right to be Forgotten'): You may demand deletion of your records where processing is no longer required by law.
- Right to Restrict Processing: You may request temporary suspension of data processing during dispute reviews.
- Right to Data Portability: You may request your submitted data in a structured, machine-readable format.
- Non-Discrimination: We will never deny services, charge different prices, or provide a lower quality of experience if you exercise statutory privacy rights.
To exercise any statutory right, submit a written notification with reasonable proof of identity to [email protected]. We respond to all formal verified inquiries within thirty days.
7. Supervisory Authority
If you reside within the United Kingdom and believe your data has been handled inconsistently with data protection legislation, you hold the right to lodge a formal complaint with the Information Commissioner's Office (ICO) at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.