Karnoval Notebook
— Legal

Privacy Policy

Last updated: 12 March 2026

Karnoval Notebook is an independent editorial publication focused on everyday wellness practices. The publication is not affiliated with any commercial, governmental, or institutional body. This Privacy Policy explains how Karnoval Notebook collects, uses, stores, and protects information submitted through this website by readers and correspondents.

By using this website, you acknowledge that you have read and understood this policy. If you do not agree with any part of it, please do not submit personal data through this site.

1. Data Controller

The data controller for this website is Karnoval Notebook, operating from the following address:

Karnoval Notebook
55 Agdon Street
EC1V 0EF London
United Kingdom

Email: [email protected]
Telephone: +44 20 7384 6291

Any enquiries regarding the processing of your personal data may be directed to the above contact details. We aim to respond to all data-related enquiries within five working days.

2. Data We Collect

Karnoval Notebook collects only the personal data that is necessary for the functioning of this editorial website. The categories of data we may collect are as follows:

  • Contact form submissions: Name, email address, and any information voluntarily included in the message field. Optionally: a subject category and preferred contact time if selected.
  • Cookies and technical data: IP address, browser type, operating system, referring URL, pages visited, and time spent on each page. This data is collected through cookie technology as described in our Cookie Policy.
  • Email correspondence: If you correspond with us by email, we retain the content of that correspondence and any personal data included in it for the purpose of managing our editorial communications.

We do not collect sensitive personal data, financial data, identity documents, or any data that falls outside the scope of standard editorial correspondence management.

3. Legal Basis for Processing

We process personal data on the following legal bases as defined under UK GDPR:

Legitimate Interest

The processing of technical and analytics data is conducted on the basis of our legitimate interest in understanding how the publication is used so that we may improve its content and structure.

Consent

Where cookies that are not strictly necessary are set on your device, we do so only with your explicit consent as obtained through the cookie consent banner on this website.

Contract Performance

Contact form data is processed for the purpose of responding to your correspondence. This constitutes the performance of a communication relationship entered into at your request.

4. How We Use Your Data

Personal data collected through this website is used exclusively for the following purposes:

  • Responding to enquiries submitted through the contact form or via email correspondence
  • Managing contributor and reader relationships in the context of editorial activities
  • Analysing aggregate website usage data to improve editorial content and site structure
  • Complying with applicable legal obligations under UK law

We do not use personal data for automated decision-making, profiling, or direct marketing communications. We do not sell, rent, or transfer personal data to third parties for commercial purposes.

5. Data Retention

Contact form data and email correspondence are retained for a period of twenty-four months from the date of last communication, after which they are securely deleted unless a longer retention period is required by law.

Analytics data collected through cookies is retained for the duration specified in our Cookie Policy. Aggregate anonymised analytics data may be retained indefinitely as it does not constitute personal data.

6. Your Rights Under UK GDPR

As a data subject resident in the United Kingdom, you have the following rights in relation to your personal data:

Right of Access

You may request confirmation of whether we hold personal data about you and, if so, a copy of that data.

Right to Rectification

You may request the correction of inaccurate or incomplete personal data held about you.

Right to Erasure

You may request the deletion of your personal data where we no longer have a lawful basis for retaining it.

Right to Object

You may object to the processing of your personal data where we rely on legitimate interest as our legal basis.

Right to Portability

Where processing is based on consent, you may request a machine-readable copy of your data for transfer to another controller.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact us at [email protected]. If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Third-Party Services

This website uses third-party services to support its technical functioning. These include:

  • Google Fonts: Typography resources loaded via Google's content delivery network. Google may collect limited technical data as part of this service. See Google's privacy policy at policies.google.com/privacy.
  • Google Maps: A map embed on the Contact page served by Google. Google may process data relating to users who interact with the map embed. See Google's privacy policy for details.
  • Content delivery networks (CDN): JavaScript and CSS libraries are loaded from third-party CDNs including jsDelivr, unpkg, and cdnjs. These services may log IP addresses as part of standard network request processing.

We are not responsible for the data processing practices of third-party services. We recommend reviewing the relevant privacy policies of each service if you have specific concerns about their data handling.

8. Security

Karnoval Notebook takes reasonable technical and organisational measures to protect personal data against accidental loss, unauthorised access, and misuse. This website is served exclusively over HTTPS. Contact form data is transmitted using encrypted connections.

No method of electronic transmission or storage is entirely secure. While we take reasonable precautions, we cannot ensure absolute data security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals, in accordance with applicable law.

9. Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes in our data handling practices or applicable law. The date at the top of this page reflects the most recent revision. Continued use of this website following an update constitutes acceptance of the revised policy. We encourage you to review this page periodically.