1. Who we are
clipscoutscoutshelf.makeup is operated by Clipscout Shelf Media Ltd, a company registered in England and Wales under company number 14892371, with its registered office at Unit 4, 118 Deansgate, Manchester M3 2ER, United Kingdom. For the purposes of the UK GDPR and the EU GDPR we are the data controller for personal data processed through this website. We publish editorial travel guides; we do not sell tickets, accommodation or transport, and we never ask for payment details.
2. The data we collect
We collect as little as a working website allows. Specifically:
- Contact form data — your name, email address, the subject you choose and the message you write, submitted voluntarily through our contact page.
- Technical data — IP address, browser type and version, device type, referring page and the pages you visit, captured in server logs when you load a page.
- Consent data — the cookie preference you select, stored locally in your browser so we do not ask again.
- Analytics data — only if you accept analytics cookies: aggregated, pseudonymised information about how pages are used.
We do not collect special-category data, payment details or precise location, and the site is not directed at children under 16.
3. How we use it and our lawful bases
- Responding to your enquiries — legitimate interests (Article 6(1)(f)) and, where you ask us to plan something, performance of a contract (6(1)(b)).
- Keeping the site secure and detecting abuse — legitimate interests.
- Measuring which guides are read so we can improve them — consent (6(1)(a)), given through the cookie banner.
- Complying with legal obligations, such as responding to lawful requests — legal obligation (6(1)(c)).
We do not use automated decision-making or profiling, and we do not sell personal data.
4. Cookies
We use essential cookies to make the site function, and optional analytics and functional cookies only with your consent. A full list, with names, purposes and lifetimes, is in our Cookie Policy. You can change your choice at any time using the "Cookie settings" link in the footer.
5. Third-party processors
We share data with a small number of processors who act on our instructions under written data processing agreements:
- Web hosting and CDN — Cloudflare, Inc. (edge caching and DDoS protection; server logs retained 30 days).
- Email — Fastmail Pty Ltd (delivery and storage of contact form submissions).
- Analytics — Plausible Insights OÜ (cookieless-by-default, EU-hosted analytics enabled only after consent).
- Images — Picsum Photos (placeholder imagery served from a third-party domain; your IP address is visible to that service when images load).
6. Retention
- Contact form messages: 24 months from the last exchange, then deleted.
- Server logs: 30 days.
- Analytics data: aggregated and retained indefinitely; it cannot be linked back to you.
- Cookie consent record: stored in your browser for 12 months.
7. Your rights under GDPR and CCPA
If you are in the UK or EEA you have the right to access your personal data, to have it rectified or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting earlier processing. You may also lodge a complaint with the Information Commissioner's Office at ico.org.uk or your local supervisory authority.
If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect and how it is used, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined in the CCPA. We will not discriminate against you for exercising any of these rights.
To exercise any right, email [email protected]. We respond within one month (45 days for CCPA requests) and may ask for proof of identity.
8. Security and international transfers
The site is served over HTTPS only. Access to contact form data is restricted to named staff using multi-factor authentication. Where a processor is located outside the UK or EEA, transfers are protected by the UK International Data Transfer Agreement or EU Standard Contractual Clauses, together with an assessment of the destination country's laws.
9. Contacting our Data Protection Officer
Our Data Protection Officer can be reached at [email protected] or by post to Data Protection Officer, Clipscout Shelf Media Ltd, Unit 4, 118 Deansgate, Manchester M3 2ER, United Kingdom. We review this policy annually and will post any material change here with a new effective date.