What this prototype handles.
Reviewed 26 October 2026. This page distinguishes facts visible in the current public privacy notice from the unconfirmed details of a future staging host.
Current public site: published facts
The current Privacy policy says the hosting environment may process technical request data such as IP address, browser information, requested URL and time for security, reliability and troubleshooting. It says email messages and contact details are used to respond and maintain an appropriate correspondence record. It also states that the public site currently has no contact form, advertising script or non-essential analytics tool.
The same notice says information is retained for a justified operational, security or legal purpose. It does not provide a specific retention duration in the public text reviewed here, so this proposal does not invent one.
This static prototype
This prototype is made from static HTML, CSS and JavaScript, a locally generated homepage image, four locally stored article photographs sourced from Unsplash, and a downloadable SVG worksheet. It has no contact form, account, wallet connection, analytics code or advertising script, and it sends no blockchain transactions.
When served, a web host will receive ordinary page and asset requests and may log technical data such as an IP address, user-agent, path and time. The actual staging host is not selected in this local package; its logging, location, processors and retention must be checked before publishing.
Remote photos and external links
The four article photographs are stored in this package and served from the same site as the pages. Each caption credits the photographer and links to the original Unsplash listing. The images are not fetched from Unsplash when a page loads, but following a photo credit takes you to Unsplash; read its privacy notice for how it handles data when you visit. Other external sites open only when you follow a link. The prototype uses local fonts and no third-party scripts.
Controller and contact route
The current site publishes a Contact with editorial/corrections and general channels, and a Privacy policy with a route for personal-data requests. The direct email addresses are protected in the public page markup, so this concept links to the verified pages rather than reproducing a guessed address. The owner must confirm that the same controller and channels cover the proposed series.
Your rights
The ICO’s guidance says privacy information should explain what data is collected, why it is used, how long it is kept and who receives it. The guidance is currently under review following changes made by the Data (Use and Access) Act, so the controller must check the current requirements before launch. The current live page lacks a legal entity name in the content reviewed for this staging draft; confirm and add the correct details before launch. For regulator information, use the ICO guidance on the right to be informed.
You can use the existing site’s Contact for current enquiries. If you believe an organisation has mishandled your data, the ICO’s public helpline is 0303 123 1113; it is the regulator, not this site’s operator.
Before publication
- Confirm the data controller’s legal name and working contact details.
- Confirm whether the current public privacy notice applies to these pages.
- Name the selected hosting provider and check its logs, storage location, processors and retention.
- Re-check cookies, scripts, forms and third-party resources on the deployed build.
- Update this notice before adding any new collection or use of personal information.
This page describes a local staging concept. It is not a completed privacy notice for a live service.