Privacy Policy
Last updated: 14 January 2026
1. About This Policy
This Privacy Policy describes how Tarnela Review ("we", "us", "our") collects, uses, stores, and shares personal data when you visit our website at tarnela.info. It is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Tarnela Review is an independent editorial publication focused on everyday wellness practices. The publication is not affiliated with any commercial, governmental, or institutional body.
Our registered correspondence address is: 67 Merlin Street, London EC1R 4QL, United Kingdoman reach us at [email protected].
2. Data We Collect
We collect limited personal data through the following means:
- — Contact form submissions: when you use the contact form on our website, we collect your name, email address, and message content. If you provide a subject selection, this is also stored.
- — Usage data: we collect anonymised data about how visitors interact with the site, including pages visited, time on page, browser type, and referring URL. This data is collected in aggregate and is not linked to individual identities.
- — Cookies: we use cookies to support site functionality and to understand aggregate site usage. See our Cookie Policy for full details.
- — Technical data: standard server logs, including IP address (anonymised after 24 hours), browser version, and access timestamps, are retained for security and infrastructure purposes.
We do not collect sensitive personal categories of data. We do not collect financial details, identity documents, or any data relating to a visitor's health status.
3. Legal Basis for Processing
We process personal data on the following legal bases under UK GDPR:
- — Legitimate interests (Article 6(1)(f)): for the processing of anonymised usage data and technical logs, where our interest in operating and improving the site does not override individual rights.
- — Consent (Article 6(1)(a)): for the use of non-essential cookies, obtained through our cookie consent mechanism on first visit.
- — Contract performance / pre-contractual steps (Article 6(1)(b)): where a contact form submission constitutes the initiation of a correspondence or editorial engagement.
4. How We Use Your Data
Data collected through contact form submissions is used solely to respond to the enquiry and, where appropriate, to engage in editorial correspondence. We do not use contact form data for marketing, third-party distribution, or any purpose beyond the correspondence initiated by the submission.
Anonymised usage data is used to understand how readers engage with published content, to identify which articles are most read, and to improve the structure and navigation of the site. This data is reviewed internally and is not shared with third parties for commercial purposes.
Technical log data is retained for security monitoring and to support the investigation of any access irregularities. IP addresses in logs are anonymised after 24 hours.
5. Data Retention
We retain personal data only for as long as is necessary for the purpose for which it was collected:
- — Contact form data is retained for up to 24 months from the date of last correspondence, after which it is securely deleted.
- — Anonymised usage data may be retained indefinitely, as it cannot be used to identify individuals.
- — Technical server logs are retained for 90 days and then deleted from production systems.
6. Sharing of Personal Data
We do not sell personal data. We do not share personal data with third parties for marketing or commercial purposes.
We may share data with the following categories of data processors, solely to support the functioning of the website:
- — Hosting providers: our web infrastructure is hosted on servers in the United Kingdom. The hosting provider has access to technical logs only and operates under a data processing agreement.
- — Analytics platforms: we may use a privacy-compliant analytics service to process anonymised usage data. No personally identifiable information is passed to these platforms.
In the event that Tarnela Review is required by law to disclose personal data — such as in response to a lawful request from a UK authority — we will comply with that obligation and, where permissible, inform the individual concerned.
7. Your Rights Under UK GDPR
You have the following rights in relation to personal data we hold about you:
- —Right of access: you may request a copy of personal data we hold about you.
- —Right to rectification: you may ask us to correct inaccurate data.
- —Right to erasure: you may ask us to delete your personal data, subject to applicable legal obligations.
- —Right to restriction: you may ask us to limit the ways in which we use your data.
- —Right to data portability: where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
- —Right to object: you may object to processing based on legitimate interests.
- —Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, write to us at [email protected]. We will respond within one calendar month. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS across the site), restricted access to correspondence data, and regular review of security configurations.
No data transmission over the internet is entirely secure. We maintain appropriate safeguards to protect personal data. While we work to protect personal data using industry-standard approaches, we cannot provide unconditional assurance of security.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The date at the top of this page indicates when the policy was last revised. We encourage periodic review of this page.
Continued use of the Tarnela Review website following the publication of a revised policy constitutes acceptance of the updated terms, to the extent permitted by applicable law.
10. Contact
For any questions about this Privacy Policy or about how we handle personal data, please contact us: