Privacy Policy

This policy describes what WorthBrief actually does with data when you visit this site.

Summary

• We do not sell personal data.
• We do not store your full IP address.
• We use one contact form, and we keep what you send only to answer you and to keep the form working.
• Analytics runs only if it has been enabled and, where required, only with your consent.
• You can ask to see, correct, or delete what we hold about you by writing to [email protected].

Server logs

Like most web servers, the infrastructure that hosts this site records technical information each time a page is requested. This exists to keep the site online, diagnose faults, and defend against abuse. Typical entries include the requested URL, the time of the request, the response status, the referring page where one is present, a coarse browser and platform identifier, and a truncated, non-reversible hash derived from the request's IP address.

We do not store your full IP address. A truncated hash is kept instead. It is salted, shortened, and one-way, so it cannot be reversed to the original address; it exists only to distinguish repeated requests from one another for security and anti-abuse purposes — for example, to recognise a flood of requests from a single source. Server logs are retained for a limited operational period and then discarded.

Contact form

When you submit the contact form, we receive the four fields you fill in — Name, Email, Subject, and Message — along with a timestamp and basic anti-abuse metadata. We use this only to read, route, and answer your enquiry, and to protect the form against automated submissions.

Form submissions are kept only as long as needed for those purposes. If you want a submission deleted, write to [email protected] and tell us enough to identify it. We will delete it unless we are required to retain it for a specific legal reason, in which case we will tell you that.

Security and anti-abuse logs

Because this site receives automated traffic, we keep security records: blocked requests, rate-limit events, and similar signals. These records are used exclusively to detect and stop abuse, scraping, and attacks on the site. They may include the truncated IP hash described above, timestamps, and request characteristics. They are not used for profiling, advertising, or any form of audience measurement.

Consent preferences

Where consent is required for non-essential storage, this site records your choice — which categories you accepted or rejected, and when you made that choice — so that we can apply it consistently on future visits and demonstrate that it was respected. Your preference record is not used for any other purpose. See the Cookie Policy for the categories involved.

Analytics

If analytics is enabled, it is used to understand which pages are visited and how readers move through the site, so that we can improve structure and content. Analytics is designed to run without advertising identifiers and is not used to build an advertising profile. Where consent is required by applicable law, analytics does not run until you have given permission, and you can withdraw that permission at any time through the consent controls on the site. If analytics is not enabled, no analytics data is collected at all.

Cookies

Cookies and similar storage are described in full in the Cookie Policy, including the categories used and which of them require consent.

Legal bases and international processing

Where data processing requires a legal basis, we rely on the legitimate interest of operating a secure website (server and security logs, anti-abuse measures), on the performance of a request you initiated (answering your contact message), and on consent where consent is required (non-essential storage and analytics where applicable). Our hosting and email infrastructure may process data in countries other than your own.

Your rights

Subject to applicable law, you may request access to the personal data we hold about you, ask for it to be corrected, ask for it to be deleted, object to or restrict certain processing, or withdraw consent you previously gave. Requests are made in writing to [email protected]. Include enough detail for us to identify what you are referring to — for example, the email address used on the form and an approximate date. We respond within a reasonable period and will tell you if we need more information to act.

If you believe we have handled your data improperly, you may raise it with us directly first, and you also have the right to complain to your local data protection authority.

Changes to this policy

When this policy changes materially, the updated date on this page changes and the substance of the change is reflected here.

Contact

Privacy questions and rights requests: [email protected]. General enquiries: see Contact.