Last updated: 5 October 2026. This notice describes the limited public test configuration, with Google Analytics paused.
Controller and contact
London Found is published by EVERY FIX LTD, the data controller, at 640A Finchley Road, London, NW11 7RR, United Kingdom. For privacy enquiries and rights requests email hello@londonfound.com.
Correspondence and its lawful basis
When you contact us, we receive your email address, message, and any name or other information you choose to provide. We use this to respond to enquiries and requests, provide support, investigate corrections and manage editorial correspondence. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): responding to people who contact our publication and maintaining accurate, useful editorial information. We use information relevant to the request, rather than unrelated profiling or marketing. Please avoid unnecessary sensitive information.
Contract or requested pre-contract steps (Article 6(1)(b)) apply only if processing is actually necessary for a contract with you or specific steps you ask us to take before entering one. Merely sending a general visitor enquiry does not create a contract. Legal obligation (Article 6(1)(c)) applies only when an identifiable legal duty requires particular processing, for example responding to a valid data-rights request. No visitor checkout, customer account or specific statutory accounting-retention period is asserted for this test.
Correspondence retention
The normal retention period for ordinary enquiries, support, editorial/correction and similar correspondence is 24 months from the last meaningful interaction in that correspondence or thread. After that, personal data should be deleted or anonymised where reasonably practicable, unless longer retention is needed for a verified legal, accounting, dispute, fraud-prevention or other legitimate requirement. Any exception must be relevant and proportionate to that requirement. We do not claim that automatic deletion is configured.
Essential operation, security and backups
WordPress and Hostinger deliver the website. Technical request information is used for page delivery, fault investigation and essential security. Our lawful basis is legitimate interests (Article 6(1)(f)): providing a functioning publication and protecting it and its users from abuse. No separate fraud-profiling service has been identified. Hostinger documents request logs containing IP address, time, requested resource/method, browser/device information, country, size and response time.
Technical-log retention depends on the applicable provider service rules and the need to diagnose faults, investigate abuse and maintain security, subject to any applicable legal preservation requirement. We do not state an unverified account-specific number. Log dashboard date filters are not retention periods. You may contact us for information about retention affecting your data.
UpdraftPlus currently schedules weekly file backups retaining two scheduled copies and daily database backups retaining seven scheduled copies, on the web server with no remote destination configured. Manually retained copies can remain outside those counts. These copy limits are not exact deletion dates. Hostinger-managed backups are separate; their account-specific settings are not asserted here.
Hosting and international processing
Hostinger acts as processor for customer data in its covered hosting services under its Data Processing Addendum. It may use sub-processors under those terms. Its published terms provide conditional EU Standard Contractual Clauses and the UK International Data Transfer Addendum for relevant transfers where applicable. They do not establish this account’s server location or prove that any particular transfer mechanism applies to every data flow. We do not claim all processing stays in the UK. Provider processing, including support or sub-processing, may involve locations outside the UK. Contact us for applicable safeguard information or copies; the provider terms describe the general framework.
Images and external links
The current homepage loads images from Unsplash servers. That provider receives technical request information such as your IP address and browser request details to deliver an image. Our purpose is displaying the publication’s illustrative photographs, assessed under legitimate interests in delivering its editorial content, using image requests rather than profiling. No Unsplash cookie was established in the available checks; that is not a claim that none can be set. Followed external links take you to independently operated sites with their own privacy practices.
PRIVE links and referrals
London Found and PRIVE share ownership, explained in our Commercial Disclosure. Contextual PRIVE links are commercial links, not an invented affiliate arrangement or automatic sharing of enquiry data. A link does not authorise forwarding your correspondence. London Found personal data is not automatically shared with PRIVE. If you request or reasonably expect a chauffeur referral, we must establish its appropriate lawful basis, explain the recipient and purpose and share only necessary information. Where consent is used for that disclosure, we must obtain it separately. This test has no automatic referral-data transfer.
Cookies and paused analytics
Complianz provides consent preferences and necessary functionality. Our basis for operating and remembering those choices is legitimate interests in delivering the site and respecting privacy preferences. Necessary storage is distinguished from any optional tracking requiring consent; legitimate interests is not used to bypass a storage-consent requirement. Google Analytics G-RLGTC2F5YH is paused and is not enabled by saving Statistics preferences. No advertising network is enabled. Any future optional analytics/tracking must be assessed and, where required, enabled only after valid consent (Article 6(1)(a)). See the Cookie Policy. A clean production visitor audit remains the purpose of the limited test.
Email services and tracking
Incoming messages are forwarded through Cloudflare Email Routing to the dedicated London Found Gmail inbox; outgoing mail is configured through Brevo. These providers process message and delivery information for those services. Access is limited to people authorised to handle London Found correspondence. The received Brevo test contained a hidden email-open tracking image. A London Found-only tracking-off method has not yet been verified: ordinary messages through that route must not be assumed tracking-free. Such optional tracking has not been justified as necessary for responding to enquiries and remains unresolved before ordinary launch correspondence uses the route. No consent or lawful basis for that tracking is invented here.
The limited-test scope has no newsletter, public user accounts, advertising network, additional contact form or third-party video/map embeds. Public comments are disabled. We do not claim business Google Workspace contractual terms apply to the free Gmail inbox.
Your rights
Depending on the processing, you can request access, correction, deletion or restriction. Portability may apply where the statutory conditions are met, including relevant consent/contract processing. Where we rely on consent, you may withdraw it without affecting earlier lawful processing. Use the Cookie settings button for storage choices, or contact us for other requests.
Right to object: you may object to processing based on legitimate interests for reasons relating to your situation. Contact hello@londonfound.com; we will consider the request and the applicable legal conditions.
You may complain to the Information Commissioner’s Office. Providing correspondence is voluntary, but without relevant contact/message information we may be unable to answer your request.