Privacy policy and personal data protection standards
This Privacy Policy outlines how Birch Spindle collects, processes, maintains, and safeguards information gathered from visitors to our website. We are committed to upholding the privacy rights of all users in strict compliance with the UK General Data Protection Regulation and the Data Protection Act 2018.
Identity of the data controller
The data controller responsible for personal information collected through this website is Birch Spindle Publishing, operating within the United Kingdom. We maintain registered operational records at 144 St John Street, Clerkenwell, London, EC1V 4PW, alongside our primary administrative offices at 48 High Street, Manchester, M4 1BD, United Kingdom.
All data handling activities and supervisory responsibilities are monitored by our appointed Data Protection Administrator. Birch Spindle acts exclusively as an independent financial education provider; we do not operate as a credit broker, banking institution, or lending facility, and we do not maintain custodial access to reader banking accounts or transaction ledgers.
Categories of information collected
We limit our data collection to records strictly necessary to deliver instructional budgeting guides and respond directly to user questions.
Direct Reader Inputs
Identifiable information you deliberately provide via forms across our website. This includes your full name, primary email address, telephone contact if provided, and the specific message content submitted via our contact channel.
Technical Connection Data
Technical connection data automatically transmitted by your web browser upon page request. This includes internet protocol (IP) addresses, browser architecture, device operating operating system versions, and server timestamp logs.
Aggregated Analytics
Aggregated, non-identifying analytical metrics concerning page navigation patterns, outbound article references, document scroll depth, and educational resource downloads to ensure content clarity and server stability.
Birch Spindle does not collect sensitive personal data concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, genetic data, biometric identifiers, or personal health records. We ask visitors never to disclose sensitive personal circumstances within general contact forms.
Lawful bases for data processing
Birch Spindle processes your personal information only when a recognised lawful basis applies under Article 6 of the UK GDPR. We rely on three distinct legal grounds depending on the precise nature of your engagement with our website:
Legitimate interests
To maintain the technical security, integrity, and operational performance of our web infrastructure; to protect against denial-of-service attempts or malicious form automation; and to respond effectively and promptly to general editorial queries submitted by readers.
Consent
When you explicitly grant affirmative permission for specific correspondence requests, downloadable budgeting worksheets, or optional non-essential tracking cookies. You hold the unconditional right to withdraw this consent at any point in time.
Legal obligation
Where processing and record retention are strictly necessary to comply with applicable statutory laws, regulatory duties, accounting rules, or mandatory judicial orders issued by recognised courts within the United Kingdom.
Data retention protocols
Personal data submitted through our contact forms is retained only for the duration necessary to resolve your specific inquiry, typically not exceeding twelve calendar months following the conclusion of correspondence.
Once the applicable retention window expires, all associated digital records are permanently and securely deleted from our hosting servers using automated sanitisation scripts.
Direct Form Correspondence
Reader inquiries, budgeting questions, editorial feedback
Server Access & Error Logs
IP addresses, request headers, error diagnostics
Statutory Legal Documentation
Formal compliance records or audit notifications
Third-party data sharing boundaries
Birch Spindle does not sell, lease, trade, or commercially rent personal user data to any external parties under any circumstances. We share information only with trusted technical service providers who support our digital infrastructure, such as certified UK and European web hosting facilities and secure email routing platforms.
Processor Mandates
These service providers act strictly as data processors under binding contractual agreements that forbid them from using your data for independent purposes or marketing.
Jurisdictional Safeguards
All primary server endpoints and data processing nodes are maintained within the United Kingdom and the European Economic Area under equivalent statutory protections.
Individual rights under UK GDPR
Under UK data protection legislation, you possess distinct legal rights regarding our handling of your personal information. These rights are exercisable without charge.
The right of access & verification
The right to rectification
The right to erasure ("right to be forgotten")
The right to restrict or object to processing
The right to lodge an ICO supervisory complaint
To exercise any of these statutory rights, please submit a written request directly to our Manchester office or contact our desk via email. We resolve all verified statutory requests within one calendar month in accordance with statutory guidelines.
Need clarification on your personal data?
Our Data Protection Administrator assists readers with verified subject access requests, data rectifications, and questions regarding our educational framework publications.