Privacy Notice

Last updated: 1 October 2026

1. Scope

This notice explains how personal data relating to UK users is handled under the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003, where applicable.

2. Data and purposes

• Email address: access to the guide and, with consent, occasional educational communications.
• Minimal technical data: website security and operation.
• Campaign parameters in the URL: local retention for the browser session to preserve navigation context.

In the current version, an email address entered in the form is not transmitted to a server or recorded. This notice must be updated before any email delivery or marketing service is activated.

3. Lawful bases

• Consent for optional electronic communications;
• legitimate interests for security and strictly necessary operation;
• compliance with a legal obligation where required.

4. Retention

Campaign parameters held in session storage expire when the browser session ends. If email collection is enabled, an appropriate retention period will be documented and communicated before processing begins.

5. Recipients

Only authorised personnel and necessary service providers may access personal data. No marketing or email provider is currently connected to the form.

6. International transfers

If personal data is transferred outside the United Kingdom, an adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum or another lawful safeguard will be used where required.

7. Your rights

Depending on the circumstances, you may request access, rectification, erasure, restriction, portability or object to processing. You may withdraw consent at any time without affecting earlier lawful processing. Email [email protected] with “Data protection request” in the subject line.

8. Complaints

You may complain to the Information Commissioner’s Office (ICO).

9. Cookies and storage

Read our Cookie Notice.