Effective Date: 1 January 2026
1. Identification of the Data Controller
The data controller responsible for the processing of your personal information across popsvaultiessortbnch.makeup is:
Popsvaultiessortbnch Media Ltd
Company Registration Number: 14982054
Registered Address: 14 St. Mark's Courtyard, Florence Way, London EC1M 5PD, United Kingdom
Designated Data Protection Contact: [email protected]
2. Information We Collect
We restrict data collection to what is strictly necessary to deliver editorial articles, maintain technical site integrity, and answer reader communications. This includes:
- Direct Correspondence: When you complete our contact form, we collect your name, email address, inquiry subject, and the contents of your submitted message.
- Technical and Server Log Data: When requesting pages, our web servers log your anonymized IP address, user-agent string, referring URL, timestamp, and requested asset path to detect anomalous cyber activity.
- Cookie Preferences: We record your affirmative consent or rejection regarding non-essential cookies via browser-side
localStorage.
3. Legal Bases for Processing (GDPR Article 6)
We only process personal data when an applicable lawful ground exists under the General Data Protection Regulation (UK/EU GDPR):
- Consent: Where you voluntarily accept analytics cookies or submit our contact form.
- Legitimate Interests: Securing our website infrastructure against automated attacks and maintaining server performance.
- Legal Obligation: Preserving business communications or statutory records to satisfy UK corporate reporting requirements.
4. Third-Party Processors and Hosting
We do not sell, rent, or trade reader personal information. We utilize reputable infrastructure providers acting as data processors under binding Data Processing Agreements (DPAs):
- Secure static hosting infrastructure within EEA/UK data centers.
- Transactional email gateways used strictly to transmit contact desk inquiries.
5. Your Statutory Rights (GDPR and CCPA)
Under UK and EU GDPR, as well as applicable regulations such as the California Consumer Privacy Act (CCPA), you possess specific rights concerning your personal information:
- Right of Access: Request a copy of the personal data we maintain about you.
- Right to Rectification: Request correction of incomplete or inaccurate data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal records where no overriding legal obligation exists.
- Right to Restrict or Object: Object to processing grounded in legitimate interests or request temporary processing restrictions.
- Non-Discrimination: California residents exercise rights under the CCPA without penalty or degradation of site features.
To exercise any statutory right, contact our Data Protection Officer at [email protected]. We will respond within thirty (30) calendar days.
6. Data Retention Schedule
Contact inquiries and submitted correspondence are maintained for a maximum duration of twenty-four (24) months from receipt to facilitate editorial continuity, after which they are permanently expunged. Server access log entries are held for a maximum of ninety (90) days before automated rotation.
7. Security Measures
We implement industry-standard technical measures, including HTTPS encryption in transit (TLS 1.3), rigorous access controls, and routine vulnerability audits to shield your information from unauthorized access, loss, or disclosure.