This notice explains how The Cartulary handles enquiries, technical information and optional website analytics. Updated 10 September 2026.
Who handles your information
The Cartulary operates this website. Use the contact form for questions about your information, marking the subject “Privacy”.
Enquiries
The form collects your name, email address, reason for contact and message so that we can review and respond to your enquiry. Messages are stored in the website’s private administration area and sent as email notifications to the project’s Gmail inbox. SiteGround hosts the website; Google provides the receiving email service. Their services may process information in countries outside the UK under their applicable terms and safeguards.
We use this information for our legitimate interests in administering correspondence, correcting publications and operating the project. Do not send confidential source material, identity documents or sensitive personal information through the general enquiry form.
Security and technical information
The host and security tools may process technical logs, including network addresses and request details, to maintain and protect the service. The form uses a short-lived, hashed network identifier to limit repeated submissions. It does not publish your message or add you to a mailing list.
Optional website analytics
If you choose “Accept analytics”, we use Google Analytics 4, loaded through Google Tag Manager, to understand which pages and tools are useful. Our legal basis for this optional processing is your consent. The site works if you choose “Only necessary”. Google Tag Manager and Google Analytics remain blocked until analytics is allowed.
Our measurement records page visits, file-download types and the domains of external links selected. Page URLs sent with these events exclude query strings and fragments. We do not send enquiry names, email addresses, messages, search terms or selected Atlas filters as analytics event fields. Google also processes technical information, such as browser and device details, approximate location and a cookie-based browser identifier. Google states that it uses UK visitors’ IP addresses to derive approximate location and discards those addresses before logging analytics data. See Google’s explanation of UK analytics data.
We use analytics to improve this site. Google Signals and advertising personalisation are disabled in our tag configuration, and advertising consent remains denied. Google may process analytics information outside the UK under its applicable data processing terms and safeguards. Read how Google uses information from sites that use its services.
You can reopen “Privacy settings” at any time and choose “Only necessary”, or turn Analytics off and save your preferences. Withdrawal stops future collection through our analytics integration and removes this site’s analytics cookies. It does not automatically erase information already collected while you had consented. Contact us if you have a question about that information.
Retention
Our policy is to review ordinary enquiries and remove them when no longer needed, normally within 12 months of the last substantive correspondence. Material needed to document a correction, resolve a dispute or meet a legal obligation may need to be kept longer. Hosting backups may retain copies for their normal backup cycle. This is a retention policy, not an automated deletion guarantee.
Google Analytics user and event data retention is set to two months, without extending that period on new activity. This setting does not remove standard aggregated reports, which may be retained longer. Analytics cookies expire within 180 days unless you withdraw permission or delete them earlier; browsers may apply a shorter limit. Our consent settings are remembered for up to 180 days. See our cookie information for details.
Your rights
You may ask for access, correction or deletion of your personal information, object to its use, or ask for processing to be restricted where applicable. Contact us through the form. You may also raise a concern with the Information Commissioner’s Office.
Other websites
Some source links open their publishers’ websites, where those publishers’ privacy and cookie policies apply. See our cookie information for how this site’s features work.
Public information requests
Our Docket presents reviewed summaries and document copies. Published response letters conceal requester-identifying details, correspondence links and unique case references. Redactions are labelled and the substantive response is retained. We do not publish links to identifiable original correspondence. Removing information here does not remove records held by other organisations.
