PRIVACY POLICY
Last Updated: February 2026
1. Overview and Data Controller
This Privacy Policy explains how Cheerdeck Living Food Atlas Ltd. ("we", "our", or "us"), trading as showzacheerdeck.living, processes and safeguards your personal information when you visit our website. As an independent reference publication, we are committed to transparent and minimal data handling in strict compliance with the UK Data Protection Act 2018, the General Data Protection Regulation (EU GDPR), and the California Consumer Privacy Act (CCPA/CPRA).
The designated Data Controller is: Cheerdeck Living Food Atlas Ltd., 44 Market Cloth Hall Way, Leeds, LS2 7EY, United Kingdom. Email contact: [email protected].
2. Personal Data We Collect
We only collect personal information that is necessary to fulfill editorial requests or maintain site security. This includes:
- Contact Form Submissions: When you submit a note via our contact page, we collect your name, email address, topic selection, and message content.
- Server Log Data: Technical connection data including truncated IP address, browser type, operating system, referring URL, and timestamp to protect against malicious traffic.
- Cookie and Local Storage State: Essential preference tokens stored in your browser to remember whether you accepted or rejected analytical scripts.
3. Purpose and Legal Basis for Processing
Under Article 6 of the UK/EU GDPR, we rely on the following lawful bases:
- Consent (Art. 6(1)(a)): When you voluntarily submit a message or explicitly opt into non-essential cookies.
- Legitimate Interests (Art. 6(1)(f)): Maintaining server stability, preventing bot abuse, and debugging technical layout errors across screen formats.
4. Retention of Data
Contact form communications are retained for a maximum period of twenty-four (24) months to facilitate editorial follow-ups and fact verification. Technical access logs are purged every ninety (90) days. We do not sell, rent, or lease personal information to any third parties or marketing brokers.
5. International Transfers and Third-Party Processors
Our web servers and email systems are located within the United Kingdom and European Economic Area (EEA). If technical support requires processing outside these territories, we enforce Standard Contractual Clauses (SCCs) to guarantee an equivalent level of privacy protection.
6. Your Legal Rights (GDPR & CCPA)
Depending on your location, you have the following enforceable rights:
- The right to access personal data held about you.
- The right to request rectification of inaccurate data.
- The right to request erasure ("Right to be Forgotten").
- The right to restrict or object to data processing.
- The right to data portability.
- The right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local EU supervisory authority.
7. How to Exercise Your Rights
To submit a Subject Access Request (SAR) or request data deletion, please contact our Data Protection Officer at: [email protected] with the subject line "Privacy / Data Request". We respond to all verified requests within thirty (30) calendar days without fee.