Crewcabinvaultbx Heritage Ltd ("we", "our", or "the Company") is committed to protecting the privacy and personal data of our academic readers, contributors, and subscribers in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the California Consumer Privacy Act (CCPA).

1. Identity of the Data Controller

The legal data controller responsible for the processing of your personal information collected through crewcabinvaultbx.beauty is:

Data Controller Information

Crewcabinvaultbx Heritage Ltd
Company Registration Number: 14829104
74 Archival Lane, Cambridge, Cambridgeshire, CB2 1TJ, United Kingdom
Data Protection Officer Email: [email protected]

2. Information We Collect

We adhere to strict data minimization principles. We collect and process personal information under the following circumstances:

  • Directly Provided Inquiries: When you submit a message through our Contact form, we collect your name, email address, topic category, and the contents of your message.
  • Technical Connection Telemetry: Automatically logged server requests, including truncated IP addresses, user-agent strings, referral headers, and access timestamps.
  • Cookie Preferences: Stored locally within your web browser to preserve your explicit cookie choices.

3. Legal Bases for Processing (UK GDPR Art. 6)

We only process your personal data where there is a valid lawful basis:

  • Legitimate Interests: To maintain the network security, load integrity, and technical delivery of our archival monographs.
  • Consent: For optional analytical measurements of reader retention and reading progression across multi-column dossiers.
  • Contractual / Pre-contractual Necessity: To respond to peer review submissions, editorial corrections, or institutional licensing queries.
  • Legal Obligation: To satisfy statutory corporate reporting, tax compliance, or lawful court orders in the United Kingdom.

4. Third-Party Service Processors

We do not sell, rent, or trade your personal data to commercial data brokers. We utilize a limited number of trusted service processors bound by strict Data Processing Agreements (DPAs):

  • Hosting Infrastructure: European-based web servers ensuring physical and technical encryption at rest and in transit.
  • Security & DDoS Protection: Edge networks caching static CSS, SVG, and HTML files to protect against denial-of-service disruptions.

5. International Data Transfers

Where technical processing requires the transfer of telemetry outside the United Kingdom or European Economic Area (EEA), such transfers are governed by UK International Data Transfer Agreements (IDTAs) or European Commission Standard Contractual Clauses (SCCs), ensuring equivalent levels of protection.

6. Data Retention Schedule

Inquiry messages sent to the editorial desk are retained for up to twenty-four (24) months to facilitate ongoing correspondence and archival verification, after which they are securely purged. Server access log files are rotated and deleted automatically every thirty (30) days.

7. Your Statutory Rights (GDPR / CCPA)

Subject to applicable statutory exemptions, you hold the following rights regarding your personal information:

  • Right of Access: Request a copy of all personal data held concerning you.
  • Right to Rectification: Request correction of inaccurate or incomplete records.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal records where no overriding legal basis exists.
  • Right to Restrict Processing: Request suspension of processing while an accuracy dispute is resolved.
  • Right to Data Portability: Receive your personal data in a structured, machine-readable format.
  • Right to Object: Object at any time to processing based on legitimate interest grounds.

To exercise any of these statutory rights, please transmit your request in writing to our Data Protection Officer at [email protected]. We respond to verified requests within thirty (30) calendar days.

8. Complaints to Supervisory Authorities

If you believe our processing of your personal data infringes applicable data protection legislation, you hold the right to lodge a formal complaint with the UK supervisory authority: The Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF (ico.org.uk).