Privacy Policy for Ancient Britain Archaeological Index (AncientBritainIndex.com)

Last Updated: [Date]

This Privacy Policy describes how AncientBritainIndex.com ("we", "us", or "our") collects, uses, and discloses your personal information when you use our website and services.

1. Introduction and Scope

Ancient Britain Archaeological Index ("the Site") is committed to protecting your privacy. This Privacy Policy applies to all information collected through our website https://www.ancientbritainindex.com, related services, and any interactions you may have with us (e.g., email correspondence). It explains our practices concerning the personal data of our visitors ("you", "your") in compliance with data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By accessing or using the Site, you acknowledge that you have read, understood, and agree to the collection, storage, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree, please do not use our Site.

2. Data Controller

The data controller responsible for your personal information is:
Ancient Britain Archaeological Index
[Optional: Insert Registered Address if applicable]
For any questions regarding this policy or your data, please contact us at: [Insert Contact Email].

3. Information We Collect

We collect several types of information to provide and improve our service to you.

3.1. Information You Provide Voluntarily

Contact Information: If you contact us via email or a contact form, we may collect your name, email address, and the contents of your message.
Account Data: If we offer user accounts in the future, registration would require a username and email address.
Communications: Records of your correspondence with us.

3.2. Information Collected Automatically (Technical Data)

When you visit the Site, we automatically collect certain information about your device and browsing actions. This may include:

Log Data: Your IP address, browser type and version, operating system, referral URLs, pages viewed, date/time stamps, and clickstream data.
Cookies and Tracking Technologies: We use cookies and similar tracking technologies. For detailed information, please see our Cookie Policy (Section 9).
Analytics Data: Data on site usage, such as session duration, page interactions, and general geographical location (country/city level, derived from IP).

3.3. Information from Third Parties

We may receive limited technical data about you from analytics providers (like Google Analytics) and security services, all of which is anonymised or pseudonymised where possible.

4. Legal Basis for Processing (UK GDPR)

We will only process your personal data where we have a lawful basis to do so under the UK GDPR. Our primary lawful bases are:

Legitimate Interests: For operating and improving the Site, ensuring security, and analysing usage to enhance content and user experience. Our legitimate interest is to provide a functional, relevant, and secure archaeological resource.
Consent: For non-essential cookies and for any future mailing list subscriptions. You can withdraw consent at any time.
Contractual Necessity: If you enter into an agreement with us (e.g., for a paid service).
Legal Obligation: To comply with applicable laws and regulations.

5. How We Use Your Information

We use the information we collect for the following purposes:

To operate, maintain, and improve the functionality of the Site.
To analyse trends, administer the site, and gather demographic information.
To monitor and prevent security issues, fraud, and abuse.
To respond to your inquiries, comments, or requests.
To comply with legal obligations and protect our legal rights.
For internal research and development to enhance the archaeological content and user experience.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal identification information to third parties. We may share generic aggregated demographic information not linked to any personal identification information. We may share your personal data in the following limited circumstances:

Service Providers: With trusted third-party vendors who perform services on our behalf (e.g., hosting providers, analytics services, email delivery services). These providers are contractually bound to handle data securely and only for the purposes we specify.
Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
Protection of Rights: To protect and defend the rights, property, or safety of the Site, our users, or the public.

7. International Data Transfers

Our Site is hosted and our data processed within the United Kingdom and the European Economic Area (EEA). However, some of our third-party service providers (e.g., Google) may operate from or have servers located outside the UK/EEA, including in the United States. In such cases, we ensure appropriate safeguards are in place, such as the use of Standard Contractual Clauses approved by relevant authorities, or the provider's participation in adequacy frameworks like the EU-US Data Privacy Framework. By using our Site, you consent to this transfer, storing, or processing.

8. Data Security

We implement appropriate technical and organisational security measures designed to protect your personal information from accidental loss, unauthorised access, use, alteration, and disclosure. These include encryption (SSL/TLS), secure server infrastructure, and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Site and hold certain information.

Essential Cookies: Necessary for the Site to function. They enable basic functions like page navigation.
Analytics Cookies: Allow us to recognise and count visitors and see how they move around the Site. This helps us improve how the Site works.
Preference Cookies: Used to remember your preferences (e.g., language, consent settings).

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept essential cookies, you may not be able to use some portions of our Site. You can manage your cookie preferences via our Cookie Consent Banner or your browser settings.

10. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this policy, or as required to comply with legal obligations, resolve disputes, and enforce our agreements.

Technical/log data is typically retained for up to 26 months for analytics purposes.
Contact information from inquiries is kept for as long as needed to address and resolve your query, and for a reasonable period thereafter for record-keeping.

11. Your Data Protection Rights (UK GDPR)

Under UK data protection law, you have rights including:

Right of Access: You can request copies of your personal data.
Right to Rectification: You can request correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data under certain conditions.
Right to Restrict Processing: You can request restriction of processing under certain conditions.
Right to Object to Processing: You can object to our processing of your personal data, particularly based on legitimate interest.
Right to Data Portability: You can request transfer of your data to another organisation or to you.
Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details in Section 2. We may need to verify your identity before responding. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO).

12. Children's Privacy

Our Site is not directed at individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us. If we become aware of such collection, we will take steps to delete that information.

13. Third-Party Links

Our Site contains links to other websites, including academic institutions, archaeological resources, and museums. This Privacy Policy applies only to our Site. We have no control over and assume no responsibility for the content or privacy practices of any third-party sites. We encourage you to review the privacy policy of every site you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Ancient Britain Archaeological Index
Email: [Insert Contact Email]