01 — Who We Are
Data Controller
Kalnore Review is an independent editorial publication focused on yoga practice, daily stretching, and mindful movement. The publication operates from 29 Goodge Street, London W1T 2PJ, United Kingdom.
For the purposes of UK data protection law, Kalnore Review is the data controller for personal data collected through this website at kalnore.info. Questions or requests relating to this policy should be directed to: [email protected].
Kalnore Review is an independent editorial publication focused on everyday wellness practices. The publication is not affiliated with any commercial, governmental, or institutional body.
02 — What Data We Collect
Personal Data Collected
The publication collects a minimal amount of personal data, consistent with its purpose as an editorial publication. The categories of data collected are:
| Data Category | Examples | How Collected | Required? |
|---|---|---|---|
| Contact data | Name, email address | Contact form submission | Required to respond |
| Communication content | Message text, subject matter | Contact form submission | Required to respond |
| Technical data | IP address, browser type, device type, pages visited, session duration | Analytics cookies (with consent) | Optional (consent-based) |
| Preference data | Cookie consent choice, display preferences | Cookie storage | Functional only |
Kalnore Review does not collect special category data (sensitive personal data as defined by Article 9 of the UK GDPR), including data concerning health, ethnic origin, or political opinions. The publication also does not collect financial or payment data.
The publication does not require user registration and does not operate a members' area or subscription service. No account data is collected or stored.
03 — Why We Use Your Data
Purposes and Legal Bases
UK GDPR requires that each use of personal data has a defined legal basis. The table below documents the purposes for which Kalnore Review processes personal data and the legal basis for each:
Contact form data
Purpose: To receive and respond to reader enquiries, correction submissions,
and contributor communications.
Legal basis: Legitimate interest (Article 6(1)(f) UK GDPR) — the publication
has a legitimate interest in receiving and responding to communications from readers and
contributors. Where a reader explicitly requests action (e.g. a correction), the legal basis
is performance of a task carried out in the public interest.
Contact data is used solely for the purpose of responding to the enquiry and is not used for marketing, shared with third parties for commercial purposes, or retained beyond the period necessary to resolve the enquiry.
Analytics data
Purpose: To understand aggregate reader behaviour and improve the publication's
content and navigation.
Legal basis: Consent (Article 6(1)(a) UK GDPR) — analytics data is collected
only where you have accepted analytics cookies via the consent banner.
Analytics data is processed in aggregated, anonymised form. Individual-level data is not reviewed by the editorial team and is retained in accordance with the third-party provider's retention schedule (currently 24 months from last interaction for Google Analytics).
Functional data
Purpose: To maintain your cookie consent preference and basic session state
during your visit.
Legal basis: Legitimate interest — strictly necessary for the processing of the
website as requested by the visitor.
04 — How Long We Keep It
Retention Periods
Personal data is retained only for as long as necessary for the purpose for which it was collected, or as required by applicable law. Specific retention periods are:
- Contact form submissions: Retained for 12 months from the date of receipt, or until the enquiry is fully resolved if resolution takes longer. After this period, messages are permanently deleted from editorial systems.
- Analytics data: Governed by Google Analytics retention settings, currently set to 24 months. IP addresses are anonymised at collection.
- Functional cookie data: Consent records are stored for 12 months, after which the consent banner reappears and a fresh consent decision is requested.
- Correction correspondence: Retained for 36 months as part of the editorial corrections register, then permanently deleted.
05 — Who We Share It With
Data Sharing and Third Parties
Kalnore Review does not sell personal data. Data is not shared with third parties for marketing or advertising purposes. Limited sharing occurs in the following circumstances:
- Google Analytics (Google LLC, USA): Aggregated and anonymised analytics data is processed by Google LLC under a data processing agreement. Google processes data in the USA under the EU-US Data Privacy Framework and equivalent UK adequacy arrangements.
- Web hosting provider: The publication's hosting infrastructure processes server log data (including IP addresses) as a necessary function of serving web pages. Server logs are retained for a maximum of 30 days and are not shared with third parties.
- Legal obligation: Data may be disclosed to a competent authority where required by law, court order, or regulatory requirement. The publication will notify affected individuals where legally permitted to do so.
No other third-party sharing occurs. The publication does not use data brokers, marketing platforms, or CRM systems that receive personal data.
06 — Your Rights
Data Subject Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
Right of Access
You may request a copy of the personal data Kalnore Review holds about you. Requests are fulfilled within one calendar month.
Right to Rectification
If data held about you is inaccurate or incomplete, you may request that it be corrected. We will confirm the correction within one month.
Right to Erasure
You may request deletion of personal data where there is no overriding legitimate reason for its continued retention. This is sometimes called the "right to be forgotten".
Right to Restrict Processing
You may request that processing of your data be restricted in certain circumstances — for example, while a dispute about accuracy is being resolved.
Right to Object
Where processing is based on legitimate interest, you may object. Processing will cease unless we can demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where processing is based on consent (analytics cookies), you may withdraw consent at any time via Cookie Settings in the footer. Withdrawal does not affect prior lawful processing.
To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within one calendar month of receipt.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113.
07 — Security
How We Protect Your Data
Kalnore Review takes reasonable technical and organisational measures to protect personal data from accidental loss, unauthorised access, and disclosure. Specific measures include:
- All data transmitted between your browser and kalnore.info is encrypted using TLS (HTTPS).
- Server access is restricted to authorised personnel using key-based authentication.
- Contact form submissions are transmitted directly to a secure editorial inbox and are not stored in a publicly accessible database.
- Analytics data is processed without individual-level identifiers; IP addresses are anonymised at the point of collection.
No data transmission over the internet is entirely secure. While we take appropriate precautions, we cannot guarantee the absolute security of data transmitted to the website.
08 — Children
Minimum Age
Kalnore Review does not knowingly collect personal data from individuals under the age of 13. The publication's content is intended for a general adult readership. If you believe a minor has submitted personal data via the contact form, please contact us at [email protected] and we will delete the data promptly.
09 — Policy Updates
Changes to This Policy
This Privacy Policy is reviewed annually and whenever there is a material change to data processing practices. Material changes will be indicated by an updated "Last reviewed" date at the top of this page. Where a change is significant — such as a new category of data being collected or a new third-party processor being engaged — we will take reasonable steps to bring the change to the attention of returning readers.
Continued use of the website following a policy update does not constitute consent to the processing of additional categories of data. Where new processing requires consent, it will be sought explicitly.
10 — Contact
Data Protection Enquiries
For privacy-related enquiries, data subject rights requests, or complaints:
- Email: [email protected]
- Post: Kalnore Review, 29 Goodge Street, London W1T 2PJ, United Kingdom
- Telephone: +44 20 7391 4862 (Monday to Friday, 09:00 – 18:00)
The Information Commissioner's Office (ICO) is the UK supervisory authority for data protection. You may contact the ICO at ico.org.uk or on 0303 123 1113.