Privacy Policy

1. Who we are

Sorbi Insup operates this website. For the purposes of UK data protection law we are the data controller for the personal data described here.

Sorbi Insup Media Ltd, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

Data protection contact: [email protected]

2. What we collect

Information you give us

• Your name, email address and message content when you email us or submit a correction, complaint or data request.
• Any order details you voluntarily share so we can chase a merchant on your behalf.

Information collected automatically

• Technical data: IP address (truncated where our analytics provider supports it), browser type and version, operating system, screen size and device type.
• Usage data: pages viewed, time on page, scroll depth, the link that brought you here and which outbound buttons you clicked.
• Cookie and identifier data set by us or by the providers described in our Cookie Policy.

We do not knowingly collect special category data, and we do not ask for or store payment card details anywhere on this site.

3. Why we use it, and our lawful basis

• To serve and secure the website — necessary cookies, load balancing, abuse and fraud prevention. Lawful basis: legitimate interests in running a safe, functioning site.
• To reply to you — handling emails, corrections and complaints. Lawful basis: legitimate interests, or performance of steps taken at your request.
• To measure how our pages perform — aggregate analytics and click attribution. Lawful basis: your consent, given through the cookie banner.
• To measure advertising and affiliate commission — recording that a referral originated here. Lawful basis: your consent.
• To meet legal and accounting obligations — retaining records where the law requires. Lawful basis: legal obligation.

Where we rely on consent you may withdraw it at any time, and withdrawal does not affect processing carried out beforehand.

4. Cookies and similar technologies

Non-essential cookies are only set after you accept them in the banner. Full detail on each category, the providers involved and how to change your mind is in our Cookie Policy.

5. Who we share data with

We do not sell your personal data. We share it only with:

• Our hosting and content delivery providers, who process data on our instructions.
• Analytics providers, where you have consented, so we can understand aggregate traffic.
• Advertising and affiliate networks, where you have consented, so a referral can be attributed and commission paid.
• Merchants, only if you click through to them — at which point their own privacy policy governs whatever you do on their site. We do not pass your contact details to them.
• Professional advisers, regulators or law enforcement where we are legally required to do so.

6. International transfers

Some of our providers operate outside the United Kingdom. Where personal data is transferred abroad we rely on UK adequacy regulations or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate supplementary safeguards.

7. How long we keep it

• Email correspondence: up to 24 months after the matter is closed.
• Data protection request records: 6 years, to evidence compliance.
• Consent records: 24 months from the date consent was given or refreshed.
• Analytics data: up to 14 months in identifiable form, aggregated thereafter.
• Server and security logs: up to 90 days.

8. Your rights

Under UK GDPR you have the right to:

• Be informed about how your data is used — that is what this document is for.
• Access a copy of the personal data we hold about you.
• Have inaccurate data corrected.
• Have data erased where there is no continuing reason for us to hold it.
• Restrict processing while a dispute is resolved.
• Data portability for data you provided under consent or contract.
• Object to processing carried out under legitimate interests, including profiling.
• Withdraw consent at any time.

To exercise any of these, email [email protected]. We respond within one calendar month and will not charge a fee unless a request is manifestly unfounded or excessive. We may ask you for information to verify your identity.

9. Security

The site is served over HTTPS. Access to mailboxes and analytics accounts is restricted to named individuals and protected with multi-factor authentication. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the limited data we hold, and we will notify you and the ICO of any qualifying breach within the statutory timeframes.

10. Children

This website is intended for adults and is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Other websites

Our pages contain links to merchant websites we do not control. This policy does not apply to them. Please read the privacy policy of any site you go on to use.

12. Changes to this policy

We review this policy at least annually and whenever our processing changes. The revision date at the top of this page always reflects the current version. Material changes will be highlighted on the site.

13. Complaints

Please raise concerns with us first at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or at ico.org.uk.