House rules
Privacy Policy
What personal data we hold about you, why we hold it, who is ever shown it and what your rights are. Set out in plain terms; tell us if anything needs explaining.
Last revised 3 November 2026
Ownership
Who holds your data, and what is held
The controller. Responsibility for the personal data handled in connection with this website and our engagements sits with Publentra Web Governance Ltd ("Publentra", "we"), incorporated in England and Wales under number 17290498, with its registered office at 7 High Street, Kington, Herefordshire, HR5 3AX. Questions about this policy go to us by email at main@publentrawebgovernance.com or in writing to our registered office, 7 High Street, Kington, Herefordshire, HR5 3AX.
What the site itself collects. Nothing at all. No enquiry form exists on this site, and there are no accounts, no newsletter and no upload facility, so nothing you do here reaches us. The one record a visit leaves is the access log our hosting provider keeps, described below.
When you write to us. We keep the message itself: who you are, the organisation you write for, how to reply, and what you tell us about your publishing setup. If an engagement goes ahead, we also hold the correspondence, the written quotation, the business materials you supply for the work and what invoicing requires.
Materials you supply. Business material handed to us for the work can hold personal data — the names and contact details of your staff in a page ownership register, for instance. It is used only to prepare your materials, and any handling of personal data on your behalf in that way is governed by terms set in the written quotation.
Server logs. Like any host, our hosting provider keeps a technical log of every visit: IP address, date and time, which page was requested and which browser asked for it. This is what lets the site be served and stay secure.
Review
Why it is used, and who else sees it
Why we use it. To reply to your enquiry and prepare a quotation; to carry out an engagement you have agreed and deliver the materials; to invoice it and keep accounts; to run the website and keep it secure; and to deal with any questions, complaints or claims about an engagement.
Our lawful bases. Under the UK GDPR we rely on:
- Article 6(1)(b): to take the steps you ask for before a contract — answering an enquiry, preparing a quotation — and to perform the contract once it is agreed;
- Article 6(1)(f): our legitimate interests in running and securing this website and in keeping a correspondence record, so that later questions about an engagement have an answer; we touch nothing beyond those purposes;
- Article 6(1)(c): our legal duty to retain accounting records.
Who sees it. We do, and the firms that keep this business running: the company that hosts this site, the email service, a payment provider when a card payment is made on its page, and our accountant. Each of them touches the data only as far as delivering its own service to us requires. Beyond that, disclosure happens only where the law demands it, or to professional advisers dealing with a claim. Personal data is never sold or rented, and never feeds advertising.
Card details. If a quotation includes payment by card, the details are typed into the payment provider's secure page; those details never reach us, and nothing of the card is kept here.
Outside the United Kingdom. Some of our providers may hold data outside the UK. A transfer like that sits under UK adequacy regulations, or under a safeguard the UK GDPR recognises, for example the International Data Transfer Agreement. Ask us which one covers your data and we will say.
How long we keep it. Fixed periods, by category. An enquiry that never becomes an engagement is kept for up to 24 months after our last exchange, then deleted. The correspondence, quotation and working records of an engagement are kept for six years after the work ends, the period in which claims about a contract can be brought. Accounting records are kept for the six years that company and tax law require. Server logs are held by our hosting provider for a short operational period and then discarded.
Release
Your rights, and how this policy changes
The rights you hold. Access to your personal data; correction of it; deletion; a restriction on our use of it; an objection where legitimate interests are our basis; and portability where the law provides it. Where we rely on your consent, you may withdraw it at any time.
How to use your rights. Write to us by email at main@publentrawebgovernance.com or in writing to our registered office, 7 High Street, Kington, Herefordshire, HR5 3AX. A reply comes within one month, as the law requires; if a complex request needs more time, we tell you. Normally there is no charge.
Do you have to give us your data? No law obliges you to. Without a name and a route back to you, no reply or quotation is possible, though, and without the details of the work we cannot carry it out.
No automation. Nothing about you is decided by automation alone, and we build no profiles.
Complaints. If you are unhappy with how your data is handled, tell us first and we will correct it. Complaints can also be made to the UK's regulator, the Information Commissioner's Office (Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF), online at ico.org.uk.
Cookies and storage. No cookies are set here, and nothing is written into browser storage; analytics and advertising tools are absent. If that ever changes, this page announces it first, with the purpose, and consent is collected wherever the law demands it.
Changes to this policy. A revision replaces this text on this page and carries a fresh date. Where a change touches an engagement in progress, we tell you about it directly.