1. What We Collect

We may collect:

• Name, email address (if you submit them via forms)
• Basic website analytics (anonymous)
• Comments or messages you voluntarily submit

We do not collect:

• Sensitive personal data
• Behavioural profiling data
• Marketing data from third parties

2. How We Use Data

We use your information to:

respond to messages

• improve website function
• maintain security and performance

We do not sell or share personal data.

3. Cookies

See the Cookies Policy for details.
Analytics cookies are anonymised; no personalised advertising is used.

4. Legal Basis

Processing is based on:

• Consent (contact forms)
• Legitimate interest (site security + performance)

5. Data Retention

Messages are stored only as long as needed to respond.
Analytics logs delete automatically on a rolling schedule.

6. Your Rights

Under UK GDPR, you may request:

• access
• correction
• deletion

Contact: info@spiralmoon.co.uk

7. Security

We use encryption (HTTPS), access controls, and minimal data storage.