Privacy Notice

The Edit Authority Ltd · Last updated 12 August 2026

This notice explains how The Edit Authority Ltd collects, uses, retains and deletes personal data in connection with this website (editauthority.co.uk), and the rights you have over that data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data controller

The Edit Authority Ltd is the data controller responsible for personal data processed through this website. The company is registered in England and Wales (Company No. 16513700); registered office: 4th Floor, Silverstream House, 45 Fitzroy Street, London W1T 6EB. It is registered with the Information Commissioner's Office as a data controller under registration reference ZC219487. For any matter concerning personal data, including requests to exercise the rights described in section 9, contact info@editauthority.co.uk.

2. Personal data we collect

• Enquiry data. If you use the contact form, we collect your name, email address, the subject line and the content of your message, together with the date and time of submission. Our form processor also records limited technical metadata, including your IP address, for spam prevention and abuse detection.
• Correspondence data. If you email us directly, we hold your email address and the correspondence itself.
• Server log data. Our hosting provider maintains standard web server logs recording the IP address, browser type, pages requested and timestamp of each visit. We access these only for security and diagnostic purposes.

This website is not directed at children and we do not knowingly collect children's data. Please do not include special category data (for example, health information) in an enquiry; we do not request it and have no basis for processing it.

3. Purposes and lawful bases

We process personal data for the following purposes, relying on the following lawful bases under Article 6 of the UK GDPR:

• Responding to enquiries about our services: Article 6(1)(b), taking steps at your request prior to entering into a contract.
• Responding to other enquiries and maintaining a record of correspondence: Article 6(1)(f), our legitimate interest in operating and administering the business.
• Website security and abuse prevention (form metadata and server logs): Article 6(1)(f), our legitimate interest in keeping the website secure.
• Retaining contractual and accounting records where an enquiry leads to an engagement: Article 6(1)(c), compliance with our legal obligations under UK company and tax law.

We do not use personal data for direct marketing, we do not sell or share it for advertising purposes, and we carry out no automated decision-making or profiling.

4. Recipients of personal data

Personal data is disclosed only to the service providers (data processors) required to operate this website:

• Formspree, Inc. processes contact form submissions on our instructions and forwards them to us by email. Its privacy policy is at formspree.io/legal/privacy-policy.
• 20i Ltd, our UK-based hosting provider, hosts the website and generates the server logs described above.

All fonts, scripts and images on this site are served from our own hosting; viewing a page causes no request to any third-party server. We may additionally disclose personal data where required by law, or to our professional advisers where necessary for legal or accounting purposes. We do not disclose it to any other third party.

5. International transfers

Formspree, Inc. is based in the United States, so contact form submissions involve a transfer of personal data outside the UK. That transfer takes place under Formspree's data processing terms, which incorporate standard contractual clauses together with the UK International Data Transfer Addendum. No other transfers of personal data outside the UK take place.

6. Retention periods

• Enquiries that do not lead to an engagement: deleted no later than 24 months after our last correspondence with you.
• Enquiries that lead to an engagement: retained for the duration of the engagement. Contractual and financial records are then retained for six years from the end of the financial year to which they relate, in line with HM Revenue & Customs record-keeping requirements and the limitation period for contractual claims.
• Form submissions held in our Formspree account: deleted in line with the enquiry periods above.
• Server logs: retained by our hosting provider on a short rolling cycle and then overwritten; we do not retain separate copies.

7. Deletion

When a retention period expires, or when we accept a request for erasure, the data is deleted from our live email and file systems and from our form processor's records. Copies may persist for a limited further period in routine encrypted backups until those backups are overwritten in the ordinary cycle; backups are not used to reinstate deleted correspondence.

8. Security

This site is served over HTTPS, so data submitted through it is encrypted in transit. Correspondence is held on access-controlled systems, and access to personal data is limited to the company's director.

9. Your rights

Under the UK GDPR you have the right to:

• access the personal data we hold about you (Article 15);
• have inaccurate data rectified (Article 16);
• have your data erased (Article 17);
• restrict our processing of it (Article 18);
• receive the data you provided to us in a portable format (Article 20); and
• object to processing carried out on the basis of legitimate interests (Article 21).

To exercise any of these rights, email info@editauthority.co.uk. We may need to verify your identity before acting on a request. We will respond within one month. No fee applies unless a request is manifestly unfounded or excessive.

10. Complaints

If you are unhappy with how we have handled your personal data, please contact us first at info@editauthority.co.uk so we can try to resolve it. You also have the right to lodge a complaint with the supervisory authority, the Information Commissioner's Office: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; telephone 0303 123 1113; ico.org.uk.

11. Cookies

This site sets no cookies of any kind: no analytics, no advertising and no functional cookies. It also uses no equivalent technologies such as local storage for tracking. Because nothing is stored on your device, no cookie consent mechanism is required.

12. Changes to this notice

We may revise this notice from time to time, for example if the way the website works changes. The date at the top of this page shows when it was last updated.