UK GDPR
Privacy, kept as small as the site.
Cierzoxora publishes pages. We do not run accounts, we do not take debt applications, and we do not build a marketing list from your reading. This policy explains the narrow cases in which personal information appears at all.
Who is responsible
The controller for personal information described here is Cierzoxora, 61 The Oval, Bath BA2 2HD, United Kingdom. Email [email protected]. Telephone +44 7457252162. We have not appointed a statutory data protection officer because our processing is limited. The same inbox handles privacy requests.
What we collect, and why
If you email or telephone the desk, we receive whatever you choose to send: usually your name, email address, phone number and the content of the message. We use that information to reply, to correct a page if you have reported an error, and to keep a record of the correspondence. The lawful basis is legitimate interests in running an editorial correspondence desk, or steps you ask us to take before answering you. Please do not send account numbers, bank statements, copies of identification, or details of your debts. If you do, we will delete them from the mailbox when we see them and we will ask you to contact a free advice agency instead.
The contact form on this website does not submit data to a server we control. It opens a draft in your own email program. Until you send that email, we have received nothing.
Server logs may be created by the company that hosts the site. Those logs can include IP address, browser type, the page requested and the time. They are used to keep the site secure and to understand rough traffic levels. We do not use them to identify readers, and we do not combine them with email correspondence. The hosting provider acts as a processor under its own contract with us.
Cookies and local storage
We store a single preference on your device, under the key cierzoxora_consent, recording whether you accepted or rejected non-essential cookies and the time of that choice. That storage is required to stop the banner returning on every page. We do not set advertising cookies, we do not use third-party analytics, and we do not embed social-media trackers. Fonts are loaded from fonts.bunny.net and icons from jsDelivr. Those providers may see a technical request from your browser, including an IP address, as part of delivering the file. If you prefer, you can read the pages with remote requests blocked; the text remains in the HTML.
How long we keep correspondence
Ordinary editorial email is kept for up to 24 months after the last message in the thread, then deleted, unless we need a longer record to show how a published correction was handled or to deal with a legal claim. Security logs follow the host’s standard retention, which we ask to be no longer than 12 months.
Sharing
We do not sell personal information. We do not pass reader details to insolvency practitioners, lenders, lead generators or advertisers. We share information only with a hosting or email provider as a processor, or if the law requires a disclosure, for example a lawful request from a public authority. If that happens and we are allowed to tell you, we will.
Your rights
Under UK data protection law you can ask for a copy of the personal information we hold about you, ask for correction, ask for deletion, ask us to restrict processing, and object to processing based on legitimate interests. Where processing is based on consent, you can withdraw consent. You can also complain to the Information Commissioner’s Office at ico.org.uk. We will respond within one month, or tell you if we need longer because a request is complex. To help us find a thread, write from the same email address you used before, or tell us the date of your message.
Children
The site is written for adults dealing with household finances. We do not knowingly collect information from children. If a parent or guardian believes a child has written to us, ask us to delete the message.
Transfers
We aim to keep correspondence and the site within the United Kingdom. If a provider stores data elsewhere, we rely on the transfer safeguards required by UK GDPR, such as an adequacy decision or the appropriate contractual clauses. You can ask us which applies.
This policy was last updated in October 2026. Material changes will be dated on this page.