Privacy Policy
Last updated: 24 May 2026
We take a minimal approach to data collection. This policy explains what we collect, why, and what your rights are.
What we collect
When you visit Spoken Record, our hosting provider and our content delivery network (Cloudflare) automatically receive standard server-log information, including your IP address, browser type and version, the pages you visit, and the time of each request. This information is used to operate the site, prevent abuse, and analyse traffic patterns in aggregate.
The site sets only the cookies strictly necessary for its operation. We do not currently use third-party analytics, advertising, or tracking cookies. If you log into the WordPress administration area, additional cookies are set to maintain your session — these apply to authenticated administrators only.
We do not currently operate a comments section, newsletter signup, or contact form. If we add any of these features in future, this policy will be updated to describe what is collected and how it is handled.
Why we collect it
The legal basis for processing server-log data is our legitimate interest in operating, securing, and improving the site. The legal basis for setting cookies necessary for logged-in administrators is the performance of our service to those users.
Who we share it with
We do not sell, rent, or share personal data with third parties for marketing purposes. The third parties that process personal data on our behalf include:
- Our hosting provider, which stores the site and its server logs
- Cloudflare, which provides content delivery and security services
Both operate under their own data-protection commitments and process data only on our instructions.
International transfers
Server logs, content, and operational data may be stored on servers in jurisdictions that differ from the country in which you reside. Where this involves transfers from the UK or EU, those transfers are made under appropriate safeguards.
How long we keep it
Server logs are typically retained by our hosting provider for thirty days, after which they are deleted or aggregated. Operational backups, which may include log data, are retained on a rolling basis for short periods.
Your rights
If you are a UK or EU resident, you have the right to:
- Request access to the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Restrict or object to certain processing
- Receive your data in a portable format
- Lodge a complaint with your local data protection authority — in the UK, the Information Commissioner’s Office (ico.org.uk)
To exercise any of these rights, contact us at the address below.
Children
Spoken Record is not directed at children under thirteen, and we do not knowingly collect personal data from them. If you believe a child has provided us with data, please contact us so we can remove it.
Changes to this policy
We may update this policy from time to time. The date at the top of this page indicates when it was last revised.
Contact
For privacy questions or to exercise your rights, write to privacy@spokenrecord.com.