1. Who is responsible
Himstead is responsible for the personal information collected through this website for the purposes described here. You can contact us at [email protected], by telephone on +44 7943 190033, or by post at Walker Memorial Hall, 18 Ampton Road, Birmingham B15 2UJ, United Kingdom. Enquiries are reviewed Monday–Friday, 09:00–17:00, UK local time, Europe/London. These are correspondence review hours. The address and hours do not describe a walk-in service. Please identify privacy enquiries clearly so they can be directed appropriately.
2. Information you choose to provide
The contact form asks for your name, email address, an enquiry topic and your message, together with an acknowledgement of this privacy information. A submission time and an internal record identifier are also saved. We use these details to understand and manage your enquiry and, where appropriate, respond. Please keep messages relevant to editorial questions, website feedback or general information requests. Do not include medical records, detailed health histories, identity documents or private information about another person. We do not ask for those materials.
3. How an enquiry is received
When a valid form submission succeeds, its contents are saved in a private server directory outside the publicly accessible website. The form confirms receipt only after this storage operation succeeds. Opening the thank-you page without a recent successful submission shows a neutral message, not a confirmation. The form does not automatically email its contents or enrol you in a mailing list. [email protected] is the contact address associated with enquiry review; a later reply may come through that address. If saving fails, the form displays an error and does not confirm receipt. You can instead contact us directly using the details above.
4. Purposes and lawful bases
We rely on our legitimate interests in managing reader correspondence, maintaining an informative website and protecting it against misuse to handle ordinary enquiry and security records. These uses are limited to what is reasonably needed for those purposes, with regard to readers’ interests and expectations. Optional browser preferences are enabled through your consent choices. The form acknowledgement confirms that the privacy explanation has been presented; it is not permission for unrelated marketing. Where a specific legal obligation requires retaining or disclosing information, that obligation may provide a separate basis.
5. Technical and security information
The contact process uses a session identifier and a form security token to help prevent forged submissions. It also checks a hidden spam field and limits repeated validated submissions. A hashed representation of an IP address is used for a short-lived request limit; the form allows no more than five validated submissions per IP-derived identifier within fifteen minutes. These records are used for abuse prevention, not audience profiling. Hosting systems may separately process ordinary connection information needed to deliver pages and investigate faults. Message contents are not deliberately placed in public URLs or browser analytics.
6. Browser preferences
Your chosen storage setting is kept in this browser for up to 180 days. Accept All permits a remembered journal category and a last-read guide link. Partial permits the journal category only. Functional removes those optional values and retains the record of your choice. These preferences stay in browser local storage and are not included in contact submissions. The contact and confirmation pages use a necessary session cookie. Our Cookie Policy describes the individual storage names, lifetimes and controls. Reading ordinary guides does not require accepting optional preferences.
7. External resources and recipients
Pages request DM Sans and Fraunces fonts from Google Fonts; the website’s CSS and JavaScript are served locally. Requests for external fonts occur when pages load, independently of the optional preference buttons. Google Fonts may receive connection information, such as your IP address and browser request details, to serve those fonts. Their own privacy arrangements also apply. People responsible for enquiry review and technical hosting administration may access information when needed for their work. We do not sell enquiry records, publish them as reader comments, or supply them for advertising profiles.
8. Location and international processing
The website is intended for readers in the United Kingdom, but external resource networks can process connection information in different countries. We do not claim that every resource request remains within the UK. Where service arrangements involve a restricted international transfer of personal information under our control, the applicable transfer requirements must be addressed through an appropriate lawful arrangement. Contact us if you need further information about the arrangements relevant to a particular enquiry. A link to another organisation’s website takes you to that organisation’s separate services and privacy practices.
9. Retention and deletion
Stored contact submissions become eligible for deletion 90 days after receipt. The server checks for expired records when processing enquiries, and the operator can arrange a scheduled daily clean-up; the actual deletion date depends on that clean-up running. Rate-limit records are likewise eligible for deletion after 24 hours. To have a record reviewed for earlier deletion, contact us using the details above. Browser preference records expire after 180 days and are checked when the site is used. Correspondence needed to resolve a legal complaint or meet a specific legal duty may require separate, justified retention. We aim to keep only the material relevant to that purpose rather than retain an entire enquiry unnecessarily.
10. Protecting information
The enquiry directory is outside the public document root and uses restricted directory and file permissions. Server validation checks submitted values, while the session cookie uses HttpOnly and SameSite protections, with the Secure attribute when served over HTTPS. The live website must be configured to use HTTPS. These measures reduce particular risks; they do not make any internet service immune from misuse or failure. Access to hosting administration should remain limited to authorised people. Please use a private device where possible when sending correspondence, check your email address carefully and avoid including more personal detail than your question requires.
11. Your rights and requests
Depending on the circumstances, you may ask to access your personal information, correct inaccuracies, erase information, restrict its use or object to processing based on legitimate interests. Data portability applies where its legal conditions are met. You can withdraw optional storage consent through Cookie preferences at any time. Send other requests using the contact details above, explaining which information is involved. We may need proportionate identity checks to protect your information. We normally respond within one month, subject to the extensions and exceptions allowed by law, and explain any refusal.
12. Concerns, children and changes
The publication is intended for adults and does not intentionally solicit children’s personal information. Contact us if information has been submitted inappropriately so we can review and remove it where appropriate. You may raise a privacy concern with us and may complain to the Information Commissioner’s Office at ico.org.uk. Our site does not make automated decisions with legal or similarly significant effects about readers. We may update this policy when the service or its data practices change; the date above identifies the current version and material changes will be explained.