Privacy Policy

Last updated: [20 November 2025]

1. Who we are

This privacy notice explains how we collect and use your personal data when you use:

The data controller is:

Name: White Flamingo Publishers LTD
 Email: whiteflamingopublishers@gmail.com
 Postal address: 20-22 Wenlock Road, London, N1 7GU, United Kingdom.

If you have any questions about this notice or how we use your data, contact us using the details above.

2. What this notice covers

We provide this information to meet our obligations under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This notice explains:

  • what personal data we collect
  • why we collect it and our lawful bases
  • who we share it with
  • how long we keep it
  • your rights and how to exercise them
  • how to complain

3. Personal data we collect

We collect and process the following categories of personal data:

3.1 Data you provide directly

  • Newsletter sign-up and QR “bonus content” forms
  • Email address
  • Name (if you choose to provide it)
  • Book / bonus content interest (e.g. which game or activity you are accessing)
  • Contact forms or direct emails
  • Name
  • Email address
  • Any other information you include in your message
  • Comments and user-generated content (if enabled on the Site)
  • Comment content
  • Name and email address
  • Website address (if you choose to provide it)

If you choose not to provide the information that is clearly marked as required on our forms, we may not be able to provide the requested service (for example, sending you the newsletter or replying to your query).

3.2 Data collected automatically when you use the Sites

Like most websites, our hosting and analytics providers may automatically collect:

  • IP address and approximate location (country or region)
  • browser type and version
  • device type and operating system
  • pages visited and actions taken on the Sites
  • date, time and duration of visits
  • referral source (for example, a search engine or another website)

We use cookies and similar technologies for this. More detail is in our separate Cookie Policy.

3.3 Data from third parties

  • Email service provider ([MailerLite] or similar)
  • Subscription status (subscribed, unsubscribed, bounced)
  • Email engagement (e.g. opens, clicks)
  • Analytics providers ([e.g. Google Analytics 4])
  • Aggregated statistics about visits and user behaviour
  • Affiliate programmes (e.g. Amazon Associates)
  • Anonymous or pseudonymous information about which links were clicked and which products were purchased; we do not receive your full payment details or your full identity from these platforms.

For MailerLite’s role as our email provider and its GDPR measures, see its published GDPR/Privacy documentation.

For analytics tools such as Google Analytics 4, IP addresses of EU/UK users are not stored and controls exist to limit data granularity for privacy.

4. How and why we use your personal data (lawful bases)

We must have a lawful basis for each use of personal data.

4.1 Newsletter and QR “bonus content” emails – Consent

When you enter your email address into a newsletter or QR landing-page form, we use it to:

  • send you the requested content (for example, access to bonus content, an online game or activity)
  • send occasional emails about new books, activities and related updates

Lawful basis: your consent, which you give when you submit the form. You can withdraw consent at any time by using the unsubscribe link in any email or by contacting us.

4.2 Responding to enquiries – Legitimate interests

When you contact us, we use the information you provide to:

  • read and respond to your message
  • keep a record of our communications (for example, if there is a complaint)

Lawful basis: our legitimate interests in running our business and responding to enquiries.

4.3 Comments and community features – Legitimate interests

If Site comments are enabled, we use your data to:

  • publish your comment
  • help prevent spam and abuse (for example, via automated spam detection)

Lawful basis: our legitimate interests in maintaining a safe and informative website.

4.4 Analytics and site improvement – Legitimate interests

We use analytics and similar tools to:

  • understand how visitors use the Sites
  • monitor performance and fix errors
  • decide what content to create and improve

Lawful basis: our legitimate interests in understanding and improving our services. Where required by cookie/ePrivacy rules, we only place non-essential cookies with your consent (managed via our cookie banner or settings).

4.5 Affiliate links and advertising – Legitimate interests

Some links on the Sites are affiliate links (for example, to Amazon). If you click these, we may earn a commission. We use tracking information provided by these programmes to:

  • understand which links and books are popular
  • run the Sites as a commercial project

Lawful basis: our legitimate interests in promoting our books and funding our work.

4.6 Legal obligations and protection of rights – Legal obligation / legitimate interests

We may use and keep your information where needed to:

  • comply with legal or tax obligations
  • protect our rights, property or safety, or those of others (for example, to prevent fraud or misuse)

Lawful basis: legal obligation and legitimate interests.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects.

5. Cookies and similar technologies

Cookies are small files placed on your device. We use:

  • strictly necessary cookies (for basic site operation and security)
  • functional cookies (for preferences, if used)
  • analytics cookies (for statistics and site improvement)
  • affiliate and advertising cookies (for tracking which links are used)

For full details of the cookies we use and how to control them, see our Cookie Policy. Under UK data protection and ePrivacy rules, you have the right to refuse non-essential cookies.

6. Who we share your data with

We only share personal data with:

  • Service providers (processors) who help us run the Sites and our emails, such as:
  • website hosting and security providers
  • email service provider (e.g. MailerLite)
  • analytics providers (e.g. Google Analytics, via cookies or tags)
  • Affiliate and advertising partners, when you click their links from our Sites
  • Professional advisers, such as accountants or legal advisers, where necessary
  • Authorities, law-enforcement or regulators, where required by law or to protect our rights

These providers are only allowed to use your data to provide services to us, and must keep it secure, under written contracts that meet UK GDPR requirements.

We do not sell your personal data.

7. International transfers

Some of our service providers are based outside the UK and the European Economic Area (EEA), or store data on servers outside these regions. This may include our email service provider and analytics or cloud services.

Where we transfer personal data outside the UK/EEA, we ensure that an appropriate safeguard is in place, for example:

  • an adequacy decision; or
  • standard contractual clauses; or
  • participation in an approved data privacy framework or similar mechanism.

You can contact us for more details about specific transfers.

8. How long we keep your data

We keep personal data only for as long as we need it for the purposes described above, and as required by law.

Broadly:

  • Newsletter and QR-bonus subscribers:
  • kept while you remain subscribed;
  • deleted or anonymised within [12–24 months] after you unsubscribe or become inactive, unless we must keep limited records to comply with legal or tax obligations.
  • Contact enquiries:
  • kept for up to [2 years] after we resolve your enquiry, unless needed for legal reasons.
  • Comments (if enabled):
  • kept as long as the comment remains published, unless you request deletion or we choose to remove it.
  • Technical logs and analytics data:
  • retained for [up to 26 months] or a shorter period where our tools allow, then deleted or anonymised.

If we cannot specify exact periods, we use criteria such as: legal limitation periods, tax rules, and the nature of our relationship with you.

9. Your data protection rights

You have rights under UK data protection law, including rights to access, correct, erase or restrict your personal data, to object to certain uses, and to data portability in some cases. You can also withdraw consent for our newsletter at any time. To exercise these rights, contact us at whiteflamingopublishers@gmail.com. You also have the right to complain to the ICO – see their website for details.

For more detail about your rights, see the Information Commissioner’s Office guidance.