choicecabinstorypulse Get briefings

Legal · Last updated 12 January 2026

Privacy policy

This policy explains how Choice Cabin Media Ltd handles personal data collected through choicecabinstorypulse.com.

1. Who we are

choicecabinstorypulse.com is operated by Choice Cabin Media Ltd ("we", "us"), a company registered in England and Wales under company number 14827365, with its registered office at 27 Farringdon Yard, Suite 4, London, EC1M 3JB, United Kingdom. We are the data controller for personal data processed through this website. General enquiries: [email protected].

2. Data we collect

We collect only what we need to publish and deliver our Serie A briefings:

  • Data you give us. Your name, email address, subject category and message when you use the form on our contact page; your email address and plan preference if you subscribe to a briefing; and any correspondence you send us.
  • Data collected automatically. IP address (truncated where technically possible), browser and device type, operating system, referring URL, pages viewed, time on page and approximate city-level location derived from IP.
  • Data stored on your device. Your cookie consent choice, stored in browser localStorage under the key ccsp_cookie_consent, together with the cookies described in our cookie policy.

We do not knowingly collect data from anyone under 16, we do not process special category data, and we do not collect payment card details on this site — subscription payments are handled by our payment processor on their own infrastructure.

3. Why we process it, and our legal bases

  • Contract (Art. 6(1)(b) UK GDPR): delivering a briefing subscription you have signed up for, managing your account and handling billing queries.
  • Legitimate interests (Art. 6(1)(f)): responding to enquiries, keeping the website secure, preventing abuse and producing aggregate readership statistics. We have assessed that these uses do not override your rights.
  • Consent (Art. 6(1)(a)): analytics and functional cookies, and optional marketing email. You may withdraw consent at any time without affecting the lawfulness of earlier processing.
  • Legal obligation (Art. 6(1)(c)): retaining accounting records and responding to lawful requests from authorities.

4. Cookies and similar technologies

Essential cookies are set without consent because the site cannot function without them. Analytics and functional cookies are set only after you select "Accept All" or enable the relevant category under "Preferences" in our cookie banner. A full table of every cookie, its purpose, provider and lifespan is published in the cookie policy, along with browser-level opt-out instructions.

5. Third-party processors

We keep our supplier list deliberately short. At the date of this policy we use:

  • Hosting and CDN provider (EU/UK regions): serving pages and storing server logs.
  • Privacy-focused analytics provider: aggregated, cookieless-by-default traffic measurement, activated only with analytics consent.
  • Email delivery platform: sending briefing emails and transactional messages.
  • Payment processor: subscription billing; they act as an independent controller for card data.
  • Customer support and ticketing tool: managing enquiry threads.

Each processor is bound by a written data processing agreement limiting use of data to our instructions. Where a transfer outside the UK or EEA is necessary, we rely on adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, supported by a transfer risk assessment. We never sell personal data or share it with data brokers.

6. Retention

  • Contact form submissions: 24 months from last correspondence, then deleted.
  • Subscriber records: for the life of the subscription plus 12 months.
  • Billing and accounting records: 6 years, as required by UK tax law.
  • Server and security logs: 90 days.
  • Aggregated analytics: 26 months, in a form that no longer identifies individuals.
  • Cookie consent record: 12 months, after which the banner reappears.

7. Your rights

If you are in the UK, EU or EEA you have the right to access your data, to rectify inaccurate data, to erasure, to restriction of processing, to data portability, to object to processing based on legitimate interests or direct marketing, and to withdraw consent. You also have the right not to be subject to solely automated decisions with legal effect — we make none. To exercise any right, email our Data Protection Officer at [email protected]. We respond within 30 days and never charge for a first request. You may complain to the Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

If you are a California resident, you have the right to know what personal information we collect and the categories of recipients, the right to delete, the right to correct, the right to opt out of the "sale" or "sharing" of personal information (we do neither) and the right not to be discriminated against for exercising these rights. Requests may be submitted by an authorised agent to the same DPO address and are verified using the email address associated with the request.

8. Security

The site is served exclusively over HTTPS. Access to enquiry and subscriber data is limited to named staff on a least-privilege basis, protected by multi-factor authentication. We review supplier security annually and will notify affected users and, where required, the ICO within 72 hours of becoming aware of a reportable personal data breach.

9. Changes to this policy

We may update this policy to reflect changes in our processing or in law. The "last updated" date at the top always reflects the current version, and material changes are announced in our briefing email at least 14 days before they take effect. Continued use of the site after that date constitutes acceptance of the revised policy.