Last reviewed: 01 November 2026. This policy explains how Silvena ("I", "we", "us") looks after your personal data when you use https://silvena.partnerme.app.
Owner note: replace the items in [square brackets] with your own details (legal name, address, ICO registration number) in the Admin CMS, Legal tab.
1. Who is responsible for your data
The data controller is [Your legal name or business name], [registered address]. ICO registration number: [ICO registration number]. Contact for all privacy matters: hello@example.com.
2. What data I collect and why
| Data | Why | Lawful basis | Kept for |
|---|---|---|---|
| Contact form: name, e-mail, topic, message, optional profile link | To read and reply to your enquiry | Legitimate interests / steps before a contract | 24 months after the last message, then anonymised |
| Newsletter: first name, e-mail, interests, preferences | To send the newsletter you asked for | Consent (UK GDPR Art. 6(1)(a), PECR) | Until you unsubscribe; unsubscribed records are anonymised after 12 months |
| Cookie choices: random visitor ID, choice, date, version, shortened network fingerprint | To prove and respect your cookie consent | Legal obligation / legitimate interests | 6 years |
| Analytics (only with consent): pseudonymous identifiers, pages viewed, device type, approximate location | To understand which content helps most | Consent | Up to 14 months in Google Analytics |
| Security logs: IP address, browser type, request time | To keep the site secure and prevent abuse | Legitimate interests | Short-term, then deleted |
Everything you send through forms is encrypted in the database (AES-256-GCM). Admin passwords are stored only as one-way salted hashes.
3. Who receives your data
I never sell your data. It is shared only with service providers who help run the site, under written data processing agreements: website hosting (PartnerMe AI), e-mail delivery (Resend, if enabled) and Google Analytics (only if you accept analytics cookies).
4. International transfers
| Processor | Purpose | Country | Transfer mechanism |
|---|---|---|---|
| PartnerMe AI | Hosting | [Confirm hosting location] | [UK adequacy / UK IDTA / UK Addendum with EU SCCs] |
| Resend | E-mail delivery | United States | UK Addendum to EU SCCs / UK IDTA |
| Google LLC | Analytics (with consent) | United States | UK-US Data Bridge / UK IDTA and EU SCCs |
5. Your rights
You can ask me at any time to: access your data (including a copy in a portable file), correct it, erase it, restrict or object to its use, or withdraw consent. Withdrawing consent never affects earlier lawful use. Email hello@example.com and I will respond within one month. You can unsubscribe from the newsletter with the link in every e-mail and change your e-mail preferences on the preference page it links to.
If you are unhappy, you can complain to the Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113.
6. Children
This site is not aimed at children. You must be 16 or older to use the contact form or join the newsletter, and you confirm this when you submit. If I learn that a child's data has been collected, I delete it.
7. Cookies
Essential cookies run the site; analytics cookies are used only with your consent. See the Cookie Policy. You can change your choice at any time using "Cookie settings" in the footer.
8. Marketing e-mails
Newsletters are sent only to people who opted in. Every e-mail includes a one-click unsubscribe link and a link to manage your e-mail preferences.
9. Security and data breaches
Data is encrypted at rest and in transit, access is limited to authorised administrators protected by two-factor authentication, and incidents are logged in a breach register. Serious breaches are reported to the ICO within 72 hours and to affected people where required.
10. Changes to this policy
I will update this page when my practices change and show the review date above.