Privacy Policy.

1. Who We Are

Ondavi Quarterly is an independent editorial publication. Our registered correspondence address is 29 Goodge Street, London W1T 2PJ, United Kingdom. For data-related enquiries, write to us at [email protected].

Ondavi Quarterly is an independent editorial publication focused on everyday wellness practices. The publication is not affiliated with any commercial, governmental, or institutional body.

2. What Data We Collect

We may collect the following categories of personal data when you interact with this website:

• ■Contact information: name and email address when you submit an enquiry via our contact form.
• ■Usage data: IP address, browser type, pages visited, and time spent on pages, collected automatically via server logs and analytics tools.
• ■Cookie data: as described in our Cookie Policy.

We do not collect sensitive personal data, payment information, or data concerning minors. We do not purchase or acquire personal data from third-party data brokers.

3. How We Use Your Data

We process personal data for the following purposes:

• ■To respond to enquiries submitted via the contact form.
• ■To analyse aggregated usage data to improve the performance and content of the website.
• ■To maintain server security and prevent fraudulent or abusive access.

We do not use personal data for automated decision-making or profiling. We do not sell, rent, or share personal data with third parties for their own marketing purposes.

4. Legal Basis for Processing

We process personal data on the following legal bases under UK GDPR:

• ■Legitimate interests (Article 6(1)(f)): processing of usage data for security and performance improvement purposes.
• ■Consent (Article 6(1)(a)): processing of cookie data where you have given consent via our cookie banner.
• ■Contract performance (Article 6(1)(b)): processing of contact data to respond to your enquiry.

5. Data Retention

Contact form submissions are retained for a period of twelve months from the date of submission and are then deleted. Server logs are retained for a period of thirty days. Cookie data is retained for the periods specified in our Cookie Policy.

We do not retain personal data for longer than is necessary for the purpose for which it was collected.

6. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• ■The right to access the personal data we hold about you.
• ■The right to rectification of inaccurate or incomplete data.
• ■The right to erasure of your personal data in certain circumstances.
• ■The right to restrict processing of your data.
• ■The right to data portability.
• ■The right to object to processing based on legitimate interests.
• ■The right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond within one month of receipt of your request. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been processed unlawfully.

7. Third-Party Services

This website uses the following third-party services which may process data on our behalf:

• ■Google Maps: an embedded map on our contact page. Google's privacy policy governs data processed through this service.
• ■Google Fonts: font files loaded from Google's servers. IP addresses may be logged by Google when fonts are loaded.

We do not share personal data with third parties except where required by law or as described in this policy.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The date of the most recent revision is shown at the top of this page. Continued use of the website after a revision constitutes acceptance of the updated policy. We recommend reviewing this page periodically.

9. Contact

For any questions regarding this Privacy Policy, write to us at [email protected] or by post to 29 Goodge Street, London W1T 2PJ, United Kingdom.