Privacy Policy

1. Introduction and Data Controller Information

This Privacy Policy applies to the web platform operated under the domain pickorabuzzpockt.com, owned and managed by Pickorabuzzpockt Exploration Media Ltd. (Company Registration No. 14920841), with registered offices at 44 Terracotta Way, Suite 8B, Bath, BA1 1UX, United Kingdom ("we", "our", or "us"). We act as the designated Data Controller under the UK Data Protection Act 2018 and the General Data Protection Regulation (EU GDPR).

2. Categories of Information We Collect

In providing archival access and research cartography, we collect minimal personal data categories:

• Direct Communication Data: When you submit coordinate updates, inquiries, or feedback through our contact dispatch system, we capture your name, email address, institutional affiliation (if provided), and the transmittal contents.
• Automated Telemetry & Technical Identifiers: We log anonymized IP addresses, browser user agents, referring URLs, screen resolution specifications, and request timestamps to maintain server resilience and detect DDoS vectors.
• Consent Preferences: We maintain a cryptographic client-side token in your browser's local storage recording your interaction with our Cookie Banner.

3. Legal Bases for Processing Under GDPR

We only process your personal information when supported by valid statutory grounds:

• Legitimate Interests (Art. 6(1)(f) GDPR): Ensuring web security, maintaining server uptime, resolving technical bugs, and protecting our cartographic databases.
• Consent (Art. 6(1)(a) GDPR): For any non-essential analytics cookies or voluntary scientific newsletter subscriptions you elect to receive.
• Legal Obligation (Art. 6(1)(c) GDPR): Compliance with statutory tax, financial record keeping, and regulatory enforcement obligations in the UK.

4. Data Retention Periods

We store communication inquiries for no longer than 24 calendar months following resolution of the research thread. Technical server access logs are systematically overwritten on a rolling 30-day cycle unless flagged for an active cybersecurity investigation.

5. Your Statutory Rights

Under applicable data protection laws, you retain explicit rights:

• Right to Access: Request a full copy of personal data retained concerning your identity.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): Request immediate destruction of your contact records where no legal retention requirement exists.
• Right to Restrict or Object to Processing: Restrict processing under specified legal scenarios.

To exercise any of these rights, contact our Data Protection Officer at: [email protected].

6. International Data Transfers

Our servers and content delivery networks operate with Standard Contractual Clauses (SCCs) and high-grade TLS 1.3 encryption for any cross-border telemetry transmission.