Qemoravin
Qemoravin
This policy explains what Qemoravin does with personal information. It is written to be read rather than to be defensible, and if any part of it is unclear we would rather you told us so we can rewrite it.
Last reviewed: 12 May 2026 · Applies to qemoravin.pro and to correspondence with the desk
Qemoravin is an unincorporated editorial partnership of four people operating from Unit 6, Portland Works, Randall Street, Sheffield S2 4SJ, United Kingdom. We are the data controller for everything described here. There is no parent company, no holding structure and no third party with a commercial interest in this site.
Data protection questions go to the same place as everything else — the form on our Write to us page, choosing Something else as the subject, or a letter to the address above marked for the attention of the desk. Fern Ashworth handles these; if she is unavailable, Nasreen Kaur does.
There are exactly three circumstances in which we end up holding anything about you, and all three require you to have chosen to contact us or subscribe.
| Circumstance | What we hold | Whether it is optional |
|---|---|---|
| You send a note through the form | Your name, email address, chosen subject, the machine you play on if you told us, and the message itself | The hardware field is optional; the rest is needed for a reply |
| You join the digest | Your email address and your cadence choice | Both required; nothing else is asked |
| You write to us by post | Whatever is on the letter, held as paper in a folder at the workshop | Entirely your choice what to include |
Separately, our hosting provider produces standard server logs containing truncated network addresses, the page requested and a timestamp. These are generated automatically as part of serving the site and are described in section 3.
Under UK data protection law every use of personal information needs a lawful basis. Ours are as follows.
| Purpose | Lawful basis |
|---|---|
| Replying to a note you sent us | Consent, given by the tick box on the form |
| Sending the digest you asked for | Consent, withdrawable from any issue |
| Investigating and publishing a correction you reported | Legitimate interests — accurate published journalism |
| Keeping the site online and secure | Legitimate interests — operating and defending the service |
| Counting page views in aggregate | Legitimate interests — understanding what is read, without identifying who read it |
Where we rely on consent you can withdraw it at any point and we will act on that without asking why. Where we rely on legitimate interests we have considered whether our interest is outweighed by your privacy, and we have concluded it is not, largely because the information involved is minimal and never leaves us.
This section exists because it is often more informative than the one above.
| Item | Kept for | Then |
|---|---|---|
| Notes sent through the form | 18 months from the last reply | Deleted from the mailbox and its backups |
| Correspondence that produced a published correction | 6 years | Retained as part of the editorial record; identifying details removed on request |
| Digest subscription | Until you unsubscribe | Address removed within 7 days |
| Paper letters | 2 years in the workshop folder | Shredded |
| Server logs | 30 days | Overwritten automatically by the host |
| Aggregate page tallies | Indefinitely | Contains no personal information at any stage |
We do not sell, rent, share or trade personal information, and we have no arrangement under which anyone could pay for access to it. Three categories of supplier necessarily touch it in the course of doing their job.
Our web host stores the site files and produces the server logs described above. Our email provider carries correspondence between you and the desk. Our digest sending tool holds subscriber addresses and cadence choices. All three are contractually bound to act only on our instructions, and none of them is permitted to use anything for their own purposes.
Beyond those, we would disclose information only where a court or regulator with proper authority required it. That has never happened, and if it did we would tell the person affected unless we were legally prohibited from doing so.
The site, the mailbox and the digest list are all hosted within the United Kingdom. Paper letters live in a locked cupboard at Portland Works. If we ever needed to use a supplier outside the UK we would put the appropriate safeguards in place first and update this section before making the change, not after.
The site is served only over an encrypted connection. Access to the mailbox and the digest tool is limited to the four of us, each with two-factor authentication, and access is reviewed whenever anyone's role changes. The test machines described on our scoring page hold no reader data at all — they are for playing games, and correspondence is never opened on them.
We are four people rather than a security department and we do not claim that our arrangements are beyond improvement. If you spot a weakness, please tell us and we will act on it.
Under UK GDPR you have the right to ask for a copy of what we hold about you, to have inaccuracies corrected, to have information deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent you previously gave. You also have the right not to be subject to automated decision-making, which is straightforward here because we do not use any.
To exercise any of these, write to us and say which right you are using. We will respond within one calendar month, usually much sooner, and we will not charge you or ask you to justify the request. We may ask one question to confirm we are speaking to the right person, particularly where a deletion is involved.
If you are unhappy with how we have handled a request, you can complain to the Information Commissioner's Office, the UK supervisory authority for data protection. We would appreciate the chance to put things right first, but that is your choice rather than a requirement.
Extracts from reader correspondence appear on several pages of this site, always with a first name, an initial and a town. We ask before publishing, every time, and we do not treat sending us a message as permission. If you agreed and later change your mind, tell us and the extract comes down at the next update — usually within a week.
Where a reader has caught a factual error we name them in the correction if they want to be named, and not otherwise. Several of our volunteer accessibility testers have asked to remain anonymous and that has never been a problem.
This site is written for adults and is not directed at children. We do not knowingly hold information about anyone under thirteen. If you believe a child has sent us personal information, tell us and we will delete it as soon as we have found it.
When this policy changes we update the review date at the top and describe the change in the next digest. Where a change materially affects how we use information you have already given us, we will ask again rather than assume, and previous versions are available on request from the desk.
We hold your name and email only if you wrote to us or asked for the digest, we use them only to reply or to send what you asked for, nobody else gets them, everything is stored in the UK, and you can have it all deleted by asking. There are no trackers on this site and nothing here is for sale.