Privacy Policy
This policy describes what personal data Ostaad Reports collects, how it is used, and what your rights are under UK GDPR and the Data Protection Act 2018. In summary: we collect very little, use it only for what we tell you here, and share it with nobody.
Data controller
The data controller for personal information processed through this website is Ostaad Reports (editorial [at] ostaadapp.com). For the purposes of UK GDPR and the Data Protection Act 2018, we are established in the United Kingdom.
What we collect
Server logs. Our web server logs standard request data (IP address, browser user-agent string, requested URL, timestamp, HTTP status) for security and diagnostic purposes. Logs are retained for 30 days and then permanently deleted. Logs are not used for advertising, profiling, or shared with third parties.
Contact email. When you email one of our published contact addresses, we receive and store your email address, your name if provided, and the content of your message. This is retained for as long as necessary to respond to your enquiry and to comply with our records obligations, typically up to two years, and then deleted.
Essential cookies. We use a single essential cookie to remember whether you have dismissed our cookie notice. It contains no personal data and expires when you clear your browser storage.
What we do not collect
We do not use Google Analytics, Facebook Pixel, or any other third-party analytics or advertising tracker. We do not embed social media widgets that transmit data to their platforms without your action. We do not run advertising cookies. We do not build profiles of visitors. We do not sell, rent, or otherwise share personal data with anybody.
Legal basis for processing
Our processing operates under two UK GDPR lawful bases: legitimate interests (Article 6(1)(f)) for server logs and site security, and your consent (Article 6(1)(a)) implied by initiating contact for correspondence you send us.
Data sharing
We do not share personal data with third parties for commercial purposes. We may share data if legally compelled to do so by a UK court order, regulatory demand, or law enforcement request that meets the legal threshold. We will notify you of any such request where legally permitted to do so.
Data hosting
Our website is hosted on servers located in the United Kingdom. No personal data collected through this site is transferred outside the UK or European Economic Area.
Your rights
Under UK GDPR you have the right to: (1) request a copy of the personal data we hold about you; (2) request correction of inaccurate personal data; (3) request deletion of your personal data where we have no continuing legal basis for holding it; (4) object to processing of your personal data; (5) request restriction of processing; (6) lodge a complaint with the Information Commissioner's Office (ico.org.uk) if you believe your rights have been breached.
To exercise any of these rights, contact editorial [at] ostaadapp.com. We will respond within one calendar month.
Children
This website is intended for adult UK residents aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.
Changes to this policy
We may update this policy from time to time to reflect changes in our practices or in the law. Material changes will be signposted on this page with the effective date updated at the top.