Privacy Policy
Last updated: 1 January 2026 · Lorvane Field Notes · 82 Britton Street
1. Who We Are
Lorvane Field Notes is an independent editorial publication focused on everyday wellness practices. The publication is not affiliated with any commercial, governmental, or institutional body. Our registered correspondence address is 82 Britton Street London, United Kingdom.
For the purposes of UK data protection law, Lorvane Field Notes is the data controller in respect of personal data collected through this website. We are committed to handling any personal data we receive responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Questions about this policy or requests regarding your personal data should be directed to: [email protected]
2. Data We Collect
Lorvane Field Notes collects only the personal data necessary to operate this website and respond to reader enquiries. We do not collect personal data for commercial profiling or for sale to third parties.
2.1 Data Provided Directly
When you use the contact form on this website, you provide us with your name, email address, and the content of your message. This data is used solely to respond to your enquiry. It is not stored beyond the period required for that purpose unless you request ongoing correspondence.
2.2 Data Collected Automatically
When you visit this website, our hosting infrastructure records standard server log data, including your IP address (in truncated form), browser type, operating system, referring URL, pages visited, and the date and time of your visit. This data is used for website administration, security monitoring, and aggregate traffic analysis. It is not used to identify individual visitors.
2.3 Cookies
This website uses cookies. A full description of the cookies used, their purpose, and how to manage them is provided in our Cookie Policy. Your cookie preferences are stored in a small first-party cookie on your device.
3. How We Use Your Data
We use the personal data we collect for the following purposes:
- ■ Responding to contact form submissions. Name and email address are used to reply to your message and, where applicable, to follow up on a correction request or editorial enquiry.
- ■ Website administration and security. Server log data is used to identify and respond to unusual traffic patterns, potential security incidents, and technical errors.
- ■ Aggregate analytics. Where analytics cookies are accepted, anonymised data about page visits and reading patterns is used to understand which content is most useful to readers. No individual is identified in this process.
- ■ Legal compliance. We retain records as required to comply with applicable law, including records of data processing activities.
4. Legal Basis for Processing
Under UK GDPR, we must identify a lawful basis for each type of personal data processing. The bases we rely on are:
- ■ Legitimate interests (Article 6(1)(f)). We process server log data and functional cookie data on the basis of legitimate interests — specifically, the interest in maintaining a secure and functional website. We have assessed that this interest is not overridden by your rights and freedoms.
- ■ Consent (Article 6(1)(a)). We process analytics cookie data only where you have given your consent via the cookie banner. You may withdraw consent at any time using the Cookie Settings link in the footer.
- ■ Contract performance (Article 6(1)(b)). Where you submit a contact form enquiry, we process the data provided in order to respond to you — this constitutes performance of a step taken at your request.
5. Data Retention
We retain personal data only for as long as is necessary for the purpose for which it was collected:
- ■ Contact form data is retained for 12 months from the date of last correspondence, after which it is permanently deleted.
- ■ Server log data is retained for 90 days for security purposes, then deleted automatically.
- ■ Cookie preference records are stored on your device and expire after 12 months, at which point you will be asked for your preferences again.
6. Third Parties
We do not sell personal data to third parties. We share data with third parties only in the following limited circumstances:
- ■ Hosting provider. Our website hosting provider processes server log data as a necessary part of providing the hosting service. They act as a data processor under a written data processing agreement.
- ■ Analytics services. Where analytics cookies are accepted, anonymised usage data is processed by a third-party analytics service. No personal identifiers are shared with this service.
- ■ Legal obligations. We may disclose personal data where required to do so by a court order or applicable law. We will inform you of any such disclosure to the extent permitted by law.
7. Your Rights
Under UK GDPR, you have the following rights in respect of personal data we hold about you:
- ■Right of access. You may request a copy of the personal data we hold about you.
- ■Right to rectification. You may request that we correct inaccurate personal data.
- ■Right to erasure. You may request that we delete personal data in certain circumstances.
- ■Right to restriction. You may request that we restrict the handling of your personal data in certain circumstances.
- ■Right to data portability. You may request a copy of data you have provided to us in a structured, machine-readable format.
- ■Right to object. You may object to processing based on legitimate interests.
- ■Right to withdraw consent. Where processing is based on consent, you may withdraw that consent at any time.
To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include HTTPS encryption for all data in transit and access controls on our hosting environment.
No transmission over the internet is entirely secure. If you have reason to believe that personal data you have shared with us has been compromised, please contact us immediately at [email protected].
10. Contact and Complaints
For any queries about this Privacy Policy or our data handling practices, please contact:
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office. The ICO can be reached at ico.org.uk or by calling 0303 123 1113.
This policy was last reviewed on 1 January 2026. We reserve the right to update it from time to time. Where material changes are made, we will indicate the revision date at the top of this page.