Who we are
Coriolis Media Ltd (“Coriolis Media”, “we”, “us”) runs www.coriolismedia.com. We are the data controller for personal data collected through this website. You can contact us about this policy or your data using the form on our contact page, or by writing to our registered office: The Kelvin Partnership, 505 Great Western Road, Glasgow G12 8HN. Coriolis Media Ltd is registered in Scotland, company number SC280256.
What we collect
This website does not use advertising trackers. The only cookie is set on the contact page, by Google reCAPTCHA (see below).
To understand how the site is used, we count visits with Umami, a privacy-focused analytics service. It does not use cookies or identify you. It records which pages are viewed, the referring website, and your browser, operating system, device type, language and country, as totals we look at in aggregate. It ignores anything after the “?” in an address, it does not store your IP address, and it does not count your visit if your browser sends a “Do Not Track” signal.
The contact form needs JavaScript, which we use to keep spam out. When you send a message with it, we collect:
- your name, email address and message
- a one-way hash of your IP address, used to limit repeated submissions and kept with your enquiry (our database never stores the IP address itself)
- a risk score from Google reCAPTCHA, which helps us filter out automated spam
To produce that score, the contact page loads Google reCAPTCHA. It may set a cookie and store information in your browser, and it collects information about your device and how you use the page. This is strictly necessary to protect the form from abuse.
Our hosting provider keeps standard server logs, including your IP address, the pages requested and the time, to keep the site secure and working. These logs are deleted automatically after 30 days.
How we use it
We use your contact details and message only to reply to your enquiry and, if you become a client, to discuss the work. Our lawful basis is our legitimate interest in responding to people who contact us. We use the visit counts only to improve the website, on the same basis. We do not sell your data or use it for marketing.
Who processes it for us
- Google Cloud (Google Cloud Platform and Firebase Hosting) hosts the website and stores enquiries in London, United Kingdom.
- Google reCAPTCHA runs on the contact page only and checks that form submissions come from people, not bots. Messages it can’t verify are not sent or stored. Google’s privacy policy applies to the information reCAPTCHA collects.
- Resend delivers the notification email about your enquiry to us, from its EU (Ireland) region.
- Umami (umami.is) provides the visit counts described above, from its EU region.
Where a provider processes data outside the UK, it does so under safeguards recognised by UK data protection law, such as the International Data Transfer Addendum.
How long we keep it
We keep genuine enquiries in our website database for 3 months, then delete them automatically. Submissions flagged as likely spam are deleted automatically after 30 days.
The notification email about your enquiry stays in our mailbox only as long as we need it to deal with your enquiry. If you become a client, we keep your details with our client records for as long as the work and our legal obligations require.
Your rights
Under UK data protection law (UK GDPR and the Data Protection Act 2018) you can ask to see the personal data we hold about you, have it corrected or deleted, restrict or object to our use of it, and receive a copy in a portable format. To make a request, use the form on our contact page.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this policy
We will post any changes on this page and update the effective date above.