Privacy Policy
Last updated: 10 April 2026
Introduction and scope
This Privacy Policy explains how nukhatulistiwa.com (“we”, “us”, “our”) processes personal data when you visit our website and when you contact us. We respect your privacy and are committed to processing personal data lawfully, fairly, and transparently. This Policy should be read together with our Cookie Policy and Terms of Service. Where we refer to “UK GDPR” we mean the UK General Data Protection Regulation as supplemented by the Data Protection Act 2018, where applicable to our processing activities.
Data controller
For the purposes of UK data protection law, the data controller responsible for personal data processed in connection with this Site is the operator of nukhatulistiwa.com. You can contact us using the contact details at the end of this Policy. If we appoint a data protection officer or representative, we will update this section accordingly.
What personal data we collect
The personal data we process depends on how you interact with us. When you browse the Site, our hosting and server systems may automatically record technical information such as internet protocol (IP) address, approximate geographic location derived from the IP address, browser type and version, operating system, referring URL, pages viewed, time and date of access, and device identifiers where available. If you send us an email, we will process your email address, the contents of your message, and any attachments or metadata you include. We do not require you to create an account to read the Site in general; if we add forms or newsletters in future, we will describe what we collect at the point of collection.
Cookies and similar technologies
We use cookies and similar technologies as described in our Cookie Policy. Cookies may be strictly necessary for the Site to function, or they may remember preferences such as consent choices. You can control cookies through your browser settings and, where applicable, through our cookie banner. Blocking certain cookies may affect Site functionality.
How we use personal data
We use personal data to operate and maintain the Site; to analyse aggregated traffic patterns and improve content and layout; to detect, prevent, and respond to fraud, abuse, security incidents, and technical issues; to comply with legal obligations; to respond to enquiries you send us; and, where you have given consent, to send marketing communications if we offer them in future. We do not use automated decision-making that produces legal or similarly significant effects solely on the basis of automated processing in relation to visitors to this Site in the manner described here.
Legal bases for processing
Where UK GDPR applies, we rely on one or more of the following legal bases: (1) legitimate interests, such as securing the Site, understanding how it is used in aggregate, and communicating with you when you contact us, balanced against your rights; (2) performance of a contract or steps taken at your request prior to entering a contract, where relevant; (3) compliance with a legal obligation; and (4) consent, where required by law—for example for cookies that are not strictly necessary, where we rely on consent.
Sharing and international transfers
We may share personal data with trusted service providers who host the Site, provide analytics, security, or email delivery, or support our business operations. They process data only on our instructions and under appropriate contractual safeguards. Some providers may be located outside the United Kingdom. Where we transfer personal data outside the UK, we ensure an appropriate safeguard exists under UK GDPR, such as the UK International Data Transfer Agreement or equivalent mechanisms, unless a specific derogation applies.
Retention
We keep personal data only for as long as necessary for the purposes described, taking into account the nature of the data, legal requirements, and our legitimate need to resolve disputes or enforce agreements. Server logs may be retained for a limited period for security and troubleshooting. Email correspondence may be retained for a reasonable period to manage ongoing enquiries and legal obligations.
Your rights
Subject to applicable law, you may have the right to request access to your personal data; rectification of inaccurate data; erasure in certain circumstances; restriction of processing; objection to processing based on legitimate interests; data portability where processing is automated and based on contract or consent; and withdrawal of consent where processing is consent-based. You may also lodge a complaint with the UK Information Commissioner’s Office (ICO). We will respond to valid requests within one month unless the complexity of the request requires an extension, as permitted by law.
Children
The Site is not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe we have collected information from a minor, please contact us and we will take steps to delete it promptly where required by law.
Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. No method of transmission over the internet is completely secure; you should use the Site responsibly and protect your own devices and credentials.
Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date at the top. We encourage you to review this Policy periodically.
Contact
Privacy enquiries: info@nukhatulistiwa.com