This Privacy Policy explains how personal information is collected, used and protected when you visit islalockwood.com, contact us or subscribe to receive emails from Isla Lockwood.

1. Who we are

This website is operated under the author name Isla Lockwood by:

Cara Williams-Lovelock – Learra Press

For the purposes of UK data protection law, Cara Williams-Lovelock – Learra Press is the data controller responsible for the personal information described in this Privacy Policy.

Website: islalockwood.com

Email: isla@islalockwood.com

2. Information we collect

We collect only the information reasonably necessary to operate the website, respond to enquiries and provide services requested by visitors.

Information you provide

You may provide personal information when you:

• complete a contact or enquiry form;
• contact us directly by email;
• subscribe to a newsletter or mailing list;
• apply to participate in an advance reader, review or promotional programme; or
• communicate with us in connection with an event, collaboration or media enquiry.

Depending on the reason for contacting us, this information may include:

• your name;
• your email address;
• the contents of your message;
• your organisation, publication or social media details;
• your reading or communication preferences; and
• any other information you choose to provide.

Please do not send sensitive personal information through the website unless it is genuinely necessary.

Newsletter information

When you subscribe to the newsletter, we may collect:

• your name;
• your email address;
• the date and method of your subscription;
• your consent record;
• your newsletter preferences; and
• technical information associated with the subscription, such as your IP address.

Where newsletter analytics are enabled, we may also receive information about email delivery, opens and link clicks. This information is used to manage the mailing list and understand how newsletter content performs.

The newsletter is currently managed using myflodesk.com.

Technical and usage information

When you visit the website, certain technical information may be collected automatically by the website, hosting provider and security services. This may include:

• your IP address;
• browser and device type;
• operating system;
• approximate geographic location;
• referring website;
• pages visited;
• date and time of access; and
• website errors or security events.

This information is used to operate, maintain and protect the website and to diagnose technical problems.

Comments, accounts and uploaded content

Visitors cannot currently create public accounts, post comments or upload images, text or other content to the website.

Only authorised administrators and editors can create or upload website content. The sections commonly found in standard WordPress privacy policies relating to visitor comments, public profiles and visitor media uploads therefore do not apply.

3. How we use your information

Responding to enquiries

We use the information supplied through the contact form or by email to:

• respond to your message;
• provide information you have requested;
• discuss a possible event, interview, collaboration or service;
• manage an existing professional relationship; and
• keep appropriate records of our correspondence.

Our lawful basis is normally our legitimate interests in communicating with readers, booksellers, libraries, reviewers, media representatives and professional contacts.

Where your enquiry concerns a potential agreement or service, we may also process the information because it is necessary to take steps at your request before entering into a contract.

Sending newsletters

We use your name, email address and preferences to send newsletters and other updates you have requested.

Our lawful basis for sending these emails is your consent.

You may withdraw your consent at any time by:

• clicking the unsubscribe link included in an email; or
• contacting us at isla@islalockwood.com

Withdrawing consent will not affect the lawfulness of emails sent before you unsubscribed.

Operating and protecting the website

We may use technical information and server logs to:

• deliver website pages;
• maintain website security;
• prevent spam, fraud and malicious activity;
• investigate errors;
• protect administrative accounts; and
• maintain backups.

Our lawful basis is our legitimate interests in operating a secure and reliable website.

Website analytics

Where analytics services are used, we may process information about how visitors use the website so that we can understand which pages are useful and improve the website.

Optional analytics will only be activated in accordance with the choices you make through the website’s cookie controls, where consent is required.

The website currently uses Google Analytics.

Legal obligations

We may process or retain information where necessary to:

• comply with a legal or regulatory obligation;
• establish, exercise or defend a legal claim;
• respond to a lawful request from a court, regulator or public authority; or
• protect the rights and safety of the website owner or another person.

4. Cookies and similar technologies

Cookies are small files placed on your device when you visit a website.

The website may use:

• strictly necessary cookies, which are required for security, website functionality and administration;
• preference cookies, which remember choices you have made;
• analytics cookies, which help us understand how the website is used; and
• third-party cookies, which may be set by embedded content or external services.

Where required, optional cookies will not be placed until you have made a choice through the cookie banner or preference tool.

You can review or change your cookie preferences here.

You can also control cookies through your browser settings. Blocking some cookies may affect the operation of parts of the website.

Further information about the cookies currently used can be found in the website’s Cookie Policy or cookie settings panel.

5. Embedded content and external websites

Pages and blog posts may contain embedded content or links from third-party services, such as:

• Instagram;
• YouTube;
• Spotify;
• book retailers;
• review platforms;
• event platforms; or
• other social media and publishing services.

Embedded content may behave as though you had visited the third-party website directly. The third party may collect information about you, use cookies or monitor your interaction with its content.

We do not control the privacy practices of external websites. You should review the privacy information provided by the relevant third party before supplying personal information or interacting with embedded content.

6. Who we share information with

We may share limited personal information with trusted service providers where necessary to operate the website and mailing list. These may include:

• the website hosting provider;
• website maintenance and security providers;
• email and contact-form services;
• the newsletter platform;
• analytics providers;
• cloud storage and backup providers;
• professional advisers, such as accountants or legal advisers; and
• public authorities where disclosure is legally required.

These organisations may process information only for the relevant service or according to their own legal responsibilities.

We do not sell or rent personal information to third parties.

The principal service providers currently used are:

• Website hosting: Siteground
• Newsletter service: Flodesk
• Website analytics: Google Analytics
• Email provider: Siteground

7. International transfers

Some service providers may store or process information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate legal safeguard is in place. This may include:

• transferring information to a country recognised as providing an adequate level of protection;
• using an approved international data transfer agreement or contractual addendum; or
• relying on another safeguard permitted by UK data protection law.

Further information about the safeguards used by a particular provider can be requested using the contact details in this policy.

8. How long we retain information

We retain personal information only for as long as it is reasonably needed for the purpose for which it was collected.

As a general guide:

• contact-form and email enquiries will normally be retained for up to 24 months after the last meaningful communication;
• correspondence connected with an ongoing professional, contractual or legal matter may be retained for longer;
• newsletter subscription information will be retained while you remain subscribed;
• when you unsubscribe, your details will be removed from the active mailing list, although a limited suppression record may be retained to ensure that you are not accidentally resubscribed;
• routine website and security logs will normally be retained for up to 90 days, unless they are needed to investigate a security incident; and
• analytics information will be retained according to the configured retention period of the relevant analytics service.

Information may be retained for longer where required by law or where necessary to establish, exercise or defend a legal claim.

When information is no longer needed, it will be deleted, anonymised or securely destroyed.

9. How we protect information

We take reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration or disclosure.

These measures may include:

• limiting access to authorised administrators and editors;
• using secure passwords and account protection;
• maintaining website and plugin updates;
• using encrypted website connections;
• maintaining appropriate backups; and
• using website security and spam-prevention tools.

However, no website, email service or method of electronic storage can be guaranteed to be completely secure.

10. Your data protection rights

Depending on the circumstances, you may have the right to:

• ask for a copy of the personal information held about you;
• ask for inaccurate or incomplete information to be corrected;
• ask for your information to be deleted;
• ask for the use of your information to be restricted;
• object to certain uses of your information;
• receive information you provided in a portable format;
• withdraw your consent at any time; and
• complain to a data protection authority.

These rights are not absolute and may not apply in every situation.

To exercise a right or ask a question about your information, contact:

isla@islalockwood.com

We may need to ask for information to confirm your identity before responding to a request.

You also have the right to complain to the UK Information Commissioner’s Office. Further information is available from the Information Commissioner’s Office website.

11. Children’s privacy

This website and mailing list are not intended to knowingly collect personal information from children under the age of 13 without appropriate permission from a parent or guardian.

If you are under 13, please do not subscribe to the newsletter or submit personal information through the website without the involvement of a parent or guardian.

If we learn that personal information has been collected from a child inappropriately, we will take reasonable steps to delete it.

12. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to the website, the services used or applicable legal requirements.

The latest version will always be published on this page. Where a change materially affects how newsletter subscribers’ information is used, we may also notify subscribers by email.

13. Contact

For questions about this Privacy Policy or the use of your personal information, please contact:

Cara Williams-Lovelock – Learra Press

isla@islalockwood.com