Privacy Policy and Data Protection Notice

1. Data Controller and Governance Overview

This website is operated by Carronfield Motoring Editions Ltd ("we", "us", "our"), registered at 48 Linacre Lane, Netherfield Yard, Sheffield, S10 3RN, United Kingdom. We act as the data controller regarding any personal information collected directly through choicegrdfriendflck.autos. Our operations are governed in accordance with the Data Protection Act 2018, the United Kingdom General Data Protection Regulation (UK GDPR), and, where applicable to visitors situated within the European Union, Regulation (EU) 2016/679 (EU GDPR).

We are dedicated to data minimisation. We do not require visitors to register user accounts, participate in subscription paywalls, or provide personal financial details to access our route dossiers and technical engineering analyses.

2. Information Collection and Processing Grounds

We collect and process personal data exclusively under defined legal bases under UK GDPR Article 6:

• Direct Inquiries: When you submit a technical question, route revision, or editorial feedback via our contact interface, we collect your name, electronic mail address, and message text. We process this under our legitimate interests to maintain accurate motoring publications and communicate with readers.
• Technical Server Telemetry: When accessing our static assets, our edge infrastructure automatically logs non-identifying technical metadata including client IP addresses (anonymised at the subnet boundary), user-agent header strings, referring resource URLs, and access timestamps. This telemetry is processed under our legitimate interest to prevent distributed denial-of-service anomalies and protect infrastructure integrity.
• Consensual Cookie Analytics: Where express consent is recorded via our cookie management interface, aggregated session statistics are gathered to monitor resource traffic. You retain the right to withdraw this consent at any time without degrading site access.

3. Third-Party Processors and International Transfers

We maintain strict contracts with hosting infrastructure providers and content delivery networks. Our network processors are legally restricted from utilising personal data for any purpose other than facilitating secure HTTP delivery. All server logs and inbound messages are held on secure infrastructure located within the United Kingdom or the European Economic Area. Where incidental processing involves infrastructure outside these territories, adequate safeguards—including standard contractual clauses approved by the UK Information Commissioner's Office (ICO)—are enforced.

4. Data Retention and Destruction

Correspondence received through our contact desk is retained for no longer than twenty-four calendar months to preserve context for ongoing route revisions, after which records are securely purged. Ephemeral web server access logs are cycled and permanently overwritten after thirty calendar days.

5. Your Statutory Rights

Under applicable United Kingdom and European data protection law, you hold several statutory rights regarding your personal records:

• The right to request access to any personal data we hold relating to you.
• The right to request rectification of inaccurate or incomplete personal records.
• The right to request erasure ("right to be forgotten") where data retention lacks statutory justification.
• The right to restrict or object to processing founded upon legitimate business interests.
• The right to data portability in a structured, machine-readable format.

To exercise any of these entitlements, please address a written communication to our Data Privacy Contact via email at [email protected] or via postal dispatch to our registered Sheffield premises. If you believe your data has been handled in violation of statutory requirements, you have the right to lodge a formal complaint with the Information Commissioner’s Office (ICO) at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.