Privacy Notice

Last updated: 18 September 2026

Controller and contact details

The data controller responsible for this website is Tiles (uk) Limited, a private limited company registered in England and Wales (Company No. 01356000, Companies House), with its registered office at 47 Church Street, Brighton, BN1 1UE, United Kingdom. You may contact us regarding data protection matters by email at [email protected] or by telephone on +44 1470 428449. The persons with responsibility for the operation of this website are Alison Margaret Bold, Ian Robert Kershaw and Louise Mary Singleton.

Scope of this policy

This Privacy Notice applies to all personal data processed through the tendonseuregenis website at tendonseuregenis.world. It covers data collected when you visit the website, submit the contact form, subscribe to the editorial newsletter and interact with any other feature of the site. This notice does not cover third-party websites linked to from tendonseuregenis; those sites operate under their own privacy policies, for which we are not responsible. The website is an editorial publication covering winter leisure and mountain resort culture, directed at an adult readership.

Categories of data and sources

When you use the contact form, we collect your name, email address, subject line and message content, together with the IP address and timestamp of the submission. When you subscribe to the newsletter, we collect your email address. When you visit the website, our hosting infrastructure automatically records standard server log data including your IP address, browser type, referring URL and pages accessed. Cookies and similar technologies may collect additional browsing data; see the Cookie Notice for full details. We do not collect sensitive personal data as defined under the UK GDPR Schedule 1.

Purposes and legal bases (Art. 6 GDPR)

We process contact form submissions for the purpose of responding to your enquiry, on the legal basis of your consent (Art. 6(1)(a) UK GDPR) given at the time of submission via the consent checkbox. We process newsletter subscriptions on the basis of consent (Art. 6(1)(a)). Server log data is processed on the basis of our legitimate interests (Art. 6(1)(f)) in maintaining the security and integrity of the website. We do not use your data for automated profiling, targeted advertising or sale to third parties.

Contact form and newsletter

Data submitted via the contact form is used solely to respond to the enquiry described in the message. It is not used for marketing purposes unless you separately subscribe to the newsletter and consent to receiving editorial communications. The newsletter is a fortnightly editorial digest of features and resort coverage; you may unsubscribe at any time using the link in any newsletter email. We retain contact form data for a period of twelve months following the close of the relevant correspondence, after which it is securely deleted.

Hosting and server logs

tendonseuregenis is hosted by a European hosting provider. Server logs are retained for a period of thirty days for the purposes of security monitoring and technical fault resolution, after which they are automatically deleted. The hosting provider processes data as a data processor on our behalf under a data processing agreement compliant with UK GDPR requirements. The provider's infrastructure is located within the United Kingdom and the European Economic Area.

Web fonts and external resources

This website uses Google Fonts, a service provided by Google LLC. When a page loads, your browser makes a request to Google's servers to retrieve the font files. This request transmits your IP address to Google. Google's privacy policy governs the processing of this data. We have selected this service on the basis of our legitimate interests in providing a well-presented editorial experience. If you wish to prevent this data transfer, you may configure your browser to block requests to fonts.googleapis.com; the site will continue to function using system fonts.

Recipients and processors

Your data is not sold or disclosed to third parties for marketing purposes. We share data only with the service providers necessary to operate the website: our hosting provider (acting as a data processor), and Google LLC for font delivery as described above. All processors are bound by contractual obligations consistent with UK GDPR requirements. No data is shared with advertising networks, analytics providers or social media platforms unless you have given explicit consent via the cookie preferences panel.

Cookies (reference to cookie policy)

tendonseuregenis uses cookies and similar tracking technologies. Strictly necessary cookies are placed on the basis of our legitimate interest in providing a functioning website. Other categories of cookies - including statistics and marketing cookies - are placed only with your explicit consent, which you may give or withdraw at any time using the cookie preferences panel accessible from the banner displayed on your first visit. For full details of the cookies used, their purposes and their retention periods, please refer to our Cookie Notice.

Transfers outside the EU/EEA

Our primary data processing takes place within the United Kingdom and the European Economic Area. The transfer of IP addresses to Google LLC for font delivery may involve processing in the United States. Google LLC participates in the EU-US Data Privacy Framework and its UK equivalent extension, providing an adequate basis for this transfer under UK GDPR Article 46. We do not make any other transfers of personal data to countries outside the UK or EEA.

Retention periods

Contact form data is retained for twelve months following the conclusion of the relevant correspondence. Newsletter subscription data is retained for as long as you remain subscribed and for a period of six months following unsubscription to allow for any necessary record-keeping. Server log data is retained for thirty days. Cookie consent records are retained for twelve months. Data processed on the basis of consent is deleted promptly upon withdrawal of that consent where technically practicable.

Security measures

We implement appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure or destruction. These measures include encrypted transmission via HTTPS across the entire website, access controls limiting data access to authorised personnel only, and regular review of our data handling practices. No transmission over the internet is entirely without risk; if you have concerns about the security of your data, please contact us at [email protected].

Your rights (access, rectification, erasure, restriction, portability, objection)

Under the UK GDPR and the Data Protection Act 2018, you have the right to request access to your personal data, the right to request rectification of inaccurate data, the right to request erasure of your data where it is no longer necessary for the purpose for which it was collected, the right to restrict processing in certain circumstances, the right to data portability where processing is based on consent, and the right to object to processing based on legitimate interests. To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.

Withdrawal of consent

Where we process your data on the basis of consent - including newsletter subscriptions and non-essential cookies - you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent for the newsletter, use the unsubscribe link in any newsletter email or contact us directly. To withdraw cookie consent, use the cookie preferences panel available on this website. Withdrawal of consent does not affect your ability to use the website.

Right to lodge a complaint with the supervisory authority

If you believe that we have processed your personal data in a manner that does not comply with the UK GDPR or the Data Protection Act 2018, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the supervisory authority for data protection in the United Kingdom. The ICO can be contacted at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF; by telephone on 0303 123 1113; or via the ICO website at ico.org.uk. We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO.

Minors

tendonseuregenis is an editorial publication directed at adult readers. We do not knowingly collect personal data from individuals under the age of eighteen. If you are under eighteen, please do not submit personal data through this website. If we become aware that we have inadvertently collected personal data from a minor, we will delete it promptly. If you believe we hold personal data relating to a minor, please contact us at [email protected].

No automated decision-making

tendonseuregenis does not engage in automated decision-making or profiling that produces legal or similarly significant effects in relation to individuals. Your data is not used to generate automated decisions about you. All editorial and operational decisions involving personal data are made by members of our team.

Changes to this policy

We may update this Privacy Notice from time to time to reflect changes in our data processing practices or in applicable law. The date at the top of this page indicates when the notice was last revised. We encourage you to review this notice periodically. Continued use of the website following publication of a revised notice constitutes acceptance of the changes to the extent permitted by applicable law.