Identity of the controller
StratfordWin is the data controller for personal information collected through the website. The trading entity will be registered in England and Wales when the publication leaves template state; registration details are on file at the office and available on request, and a complaint can be made directly to the Information Commissioner’s Office at any point.
What gets collected, and why
StratfordWin keeps the smallest set of personal information practical for an editorial publication. The desk does not run a customer account system and never asks for a name, address or payment detail. Three categories are processed: server access logs, optional measurement events, and any correspondence written in via the signal-flag desk.
Server access logs (IP address, user-agent, requested URL, timestamp) are processed under the lawful basis of legitimate interest — the publication needs operational records to defend against abuse. The retention period is 30 calendar days, after which the log line is anonymised by stripping the IP octet.
Optional measurement events are processed only with explicit consent. The cookie banner stores the choice locally and the analytics pixel is held off until consent is granted. Withdrawing consent removes the pixel within the next page load.
Reader correspondence (a message into the signal-flag form, an email to the desk) is processed under the lawful basis of legitimate interest in handling reader queries. The desk keeps the message for as long as is needed to reply, plus a short retention for compliance and audit purposes, and then disposes of the record.
Recipients and sub-processors
StratfordWin uses a small number of operational sub-processors. A British hosting provider serves the pages and generates the access log. An optional analytics platform measures aggregate traffic if and only if the reader has opted in. An optional attribution platform records sponsored-anchor clicks if and only if the marketing cookie has been accepted. The current shortlist of sub-processors is maintained at the editorial desk and provided on request.
International transfers
Personal data processed by StratfordWin is stored within the United Kingdom. Where a sub-processor operates in another jurisdiction, the desk relies on the United Kingdom adequacy regulations or Standard Contractual Clauses, depending on the destination. Readers who want the current sub-processor list mapped to its legal basis can write in.
Your UK GDPR rights, in one paragraph
Under the United Kingdom General Data Protection Regulation, readers have the right of access to the data StratfordWin holds, the right of rectification of inaccurate data, the right of erasure where there is no overriding lawful basis to retain it, the right of restriction of processing while the desk investigates a complaint, the right to data portability where the lawful basis is consent or contract, the right to object to processing on the basis of legitimate interest, and the right to withdraw consent at any point where consent was the lawful basis. Send a request to the desk via the signal-flag form and the response goes out inside one calendar month.
Right to complain to the supervisory authority
Where a reader believes StratfordWin has not handled personal data properly, an unrestricted right exists to lodge a complaint with the Information Commissioner’s Office at ico.org.uk/make-a-complaint. The desk would prefer to resolve the matter directly first, but the right to complain to the supervisory authority is unconditional.
Adults-only commitment
StratfordWin is intended for adult British readers aged 18 or over. The publication does not knowingly collect personal data from any person under 18. Any data the desk discovers to belong to an underage reader will be deleted at first opportunity; if a parent or guardian is aware of such a record, please write in for prompt action.
// how this notice changes
Each substantive change to this notice is recorded with a fresh revision date in the build meta-strip above. Where the change materially expands the categories of data processed or the lawful basis applied, the change will be announced in the cookie banner so that readers have a fair chance to review and to update consent.