Privacy Policy

1. Data controller

The data controller for personal data processed through QuillAtlas is Magrathean UK Ltd, a company registered in England and Wales (Company No. 16955343), with registered office at 16 Caledonian Court West Street, Watford, England, WD17 1RY.

Contact: [email protected]

2. Scope

This policy applies to the website at quillatlas.uk and related editorial directory pages, including listing pages, journal entries, contact links, and nomination routes.

3. Personal data we collect

• Contact data. Name, email address, venue name, role, and any details you provide when you email us, request a correction, request removal, or nominate a venue.
• Editorial correspondence. Information needed to verify a listing, respond to a business owner, handle a correction, or maintain an internal audit trail for editorial decisions.
• Basic technical data. Server logs may include IP address, browser type, requested URL, referrer, and timestamp for security, troubleshooting, and abuse prevention.

We do not knowingly collect special-category data. We do not knowingly collect data from children under 16.

4. Cookies and analytics

QuillAtlas does not currently use advertising cookies, behavioural advertising tags, or session replay. If analytics are added later, this policy will be updated before or at the time those tools are enabled.

5. Legal bases

• Legitimate interests. To respond to enquiries, verify listing details, maintain directory quality, prevent abuse, and operate the site.
• Performance of a contract or pre-contract steps. Where a business or individual contacts us about a specific request.
• Legal obligation. Where records must be kept for legal, accounting, regulatory, or dispute purposes.

6. How we use data

• To respond to emails, correction requests, removal requests, and nominations.
• To verify venue details and maintain accurate editorial listings.
• To keep an internal record of editorial decisions and business-owner requests.
• To secure, maintain, and troubleshoot the website.
• To comply with applicable law.

We do not sell, rent, or trade personal data.

7. Processors and sharing

We may use infrastructure, hosting, DNS, email, and security providers to operate the site and receive correspondence. We may also share information with professional advisers where necessary.

We may disclose information if required by law, court order, regulator, or where disclosure is necessary to protect legal rights, prevent abuse, or respond to a security issue.

8. International transfers

Some service providers may process data outside the United Kingdom. Where this happens, we rely on appropriate safeguards such as adequacy regulations, contractual transfer terms, or equivalent protections required by UK data protection law.

9. Retention

• General enquiries are normally retained for up to 24 months.
• Correction, removal, and editorial verification records may be retained while a listing remains live and for a reasonable period after removal.
• Server logs are retained only as long as needed for security, troubleshooting, and hosting operations.
• Records may be kept longer where needed for legal claims, tax, accounting, or regulatory obligations.

10. Your rights

Under UK data protection law, you may have rights to access, correct, erase, restrict, port, or object to processing of your personal data, subject to legal exceptions.

To exercise your rights, email [email protected]. You may also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

11. Security

We use reasonable technical and organisational measures to protect personal data. No website or email system is completely secure, but we aim to limit access, protect systems, and respond promptly to security issues.

12. Changes

We may update this policy from time to time. The effective date above shows when the current version took effect.