SeaBuckthornWorld collects as little as a content site can. This page says what’s collected, why, on what legal basis, how long it’s kept, and the control you have over it. Some features, such as analytics, ads and an email list, are switched on or off over time, and the paragraphs below describe what is switched on today, so they change on the day a feature does.
Who’s responsible for your data
The controller of the personal data collected through this site is its publisher, SeaBuckthornWorld. You can reach the publisher about anything on this page at hello@seabuckthornworld.com or through the contact page.
What’s collected, and why
Server logs. The web server writes a standard log line for each request, with the address the request arrived from, the page asked for, the response status, the time, the page you came from, and your browser’s user-agent string. The site’s host, Railway, also records each request in its own HTTP log, which holds your IP address, the page asked for, the response status, the time and your browser’s user-agent string. Those logs keep the site running and secure, and they show which pages get read. They aren’t used to build profiles or matched with other data. The legal basis is legitimate interests in running and securing the site, under Article 6(1)(f) of the GDPR and the UK GDPR.
Emails you send. If you write to the publisher, your message and your address are used to answer you and to deal with what you raised. The legal basis is legitimate interests in replying, or steps you asked for.
The email list. There’s no email list yet, so no form on the site collects an email address.
Analytics. The site runs no analytics. There’s no Google Analytics and no other counting script, so nothing measures your visit beyond the server logs.
Advertising. This site runs no ads, so no ad network sets cookies or learns anything about your visit.
Links to sellers. Links to sellers are plain links today. Once you click through, the seller’s own privacy policy and cookies apply, just as they would if you’d typed the address yourself.
What’s never done
Your personal data is never sold or rented. There are no accounts, so there’s no profile to leak, and there’s no marketing email beyond the email list, if you join it.
Your rights
If you’re in the EEA or the UK, the GDPR and the UK GDPR give you the right to see the personal data held about you, to have it corrected or erased, to restrict or object to how it’s used, to receive a copy you can take elsewhere, and to withdraw consent at any time. You can also complain to a supervisory authority, which is your local data protection authority in the EEA or the Information Commissioner’s Office (ICO) in the UK.
If you’re in California, the CCPA, as amended by the CPRA, gives you the right to know what personal information is collected about you, to have it deleted or corrected, and not to be treated differently for asking. SeaBuckthornWorld doesn’t sell personal information.
With no ads on the site, nothing about you is shared for advertising either.
To use any of these rights, email the publisher at hello@seabuckthornworld.com and say what you’d like. You’ll get an answer within one month. The same rights are honoured for everyone, wherever you read from.
How long things are kept
- Server logs are kept by the host under its log retention settings and deleted on its schedule. Any copy pulled out to fix a problem or to see which pages get read is deleted once that job is done.
- Emails you send are kept as long as it takes to deal with what you raised, then deleted.
Where your data goes
The host, and Google when Analytics or ads are on, may process data outside your country, including in the United States. Where the GDPR or the UK GDPR applies, those transfers rely on the safeguards in each provider’s data processing terms, such as the European Commission’s standard contractual clauses.
Children
This site is for adults making their own decisions about food and supplements. It isn’t directed at children under 16, and it doesn’t knowingly collect anything from them. If you think a child has sent personal data, email the publisher and it’ll be deleted.
Changes to this policy
When this policy changes, the updated date at the top of the page moves. A change in what’s collected shows up here on the same day it takes effect.
What this policy doesn’t cover
Links out. Once you click through to a seller, a study database, or any other site, its own policy applies, and the affiliate disclosure explains how links to sellers work. Reading a seller’s policy before entering payment details is dull advice that pays off exactly when you need it.
Frequently asked questions
Do you use tracking cookies?
It depends on what the site has switched on, and this page says which. With nothing switched on, the site sets no cookies at all. Google Analytics and Google's ad code, when they run, set their own cookies, and where the law requires your consent you're asked before they do.
Illustration.