Privacy Policy
What we collect, why we collect it, and how you can make us stop.
1. Who is responsible
Cluck Atlas is the data controller for personal data processed through this website. You can reach our data protection contact at privacy@leadrouteoravex.org, or by post on request to that address. We are a small independent publisher and do not have a statutory obligation to appoint a Data Protection Officer, but the address above is monitored by the person responsible for these questions.
2. What we collect
We keep the amount of personal data on this site deliberately small.
2.1 Information you give us
- Contact form: your name, email address, the topic you select and the content of your message.
- Newsletter: your email address, and the date and time you subscribed and confirmed.
- Correspondence: anything you choose to include when you email us directly.
2.2 Information collected automatically
- Server logs: our hosting provider records the requesting IP address, the time of the request, the URL requested, the HTTP status, the referring URL and the user-agent string. These logs exist to keep the service running and secure.
- Consent record: when you answer the cookie banner we store your choice in your browser's local storage, together with a timestamp, so we do not ask again and so we can demonstrate that consent was given. This never leaves your device.
- Analytics and advertising data — only with your consent: see section 5.
2.3 What we never collect
We do not ask for and do not want special category data (health, religion, political opinion, biometrics), payment card details, or precise geolocation. We do not buy personal data from third parties, and we do not attempt to identify individual readers from analytics data.
3. Why we use it
| Purpose | Data used |
|---|---|
| Answering your message | Name, email, message content |
| Sending the newsletter you asked for | Email address, subscription timestamp |
| Keeping the site available and secure | Server log data |
| Remembering your cookie choice | Consent record in local storage |
| Understanding which pages are read | Google Analytics data — consent only |
| Measuring whether our ads work | Google Ads data — consent only |
We do not use your data for automated decision-making that produces legal or similarly significant effects, and we do not profile readers for any purpose other than the aggregate advertising measurement described below.
4. Legal bases for processing
- Consent (Art. 6(1)(a) GDPR) — analytics cookies, advertising cookies, and newsletter subscription. You may withdraw consent at any time and doing so is as easy as giving it.
- Legitimate interests (Art. 6(1)(f) GDPR) — keeping the site secure and available, and replying to an enquiry you have chosen to send us. We have assessed that these interests do not override your rights, because the data involved is minimal and used only for the purpose you would expect.
- Legal obligation (Art. 6(1)(c) GDPR) — retaining consent records and responding to lawful requests from a supervisory authority.
5. Google Analytics and Google Ads
We advertise this site through Google Ads in order to reach new readers, and we use Google Analytics 4 to see which pages people actually read. Both are switched off by default.
5.1 Consent Mode v2
This site implements Google Consent Mode v2. Before you make a choice, the parameters
ad_storage, ad_user_data, ad_personalization,
analytics_storage, functionality_storage and
personalization_storage are all set to denied. In that state Google's
tags do not write cookies or read identifiers from your device; at most they send a
cookieless, aggregated signal that a page was viewed. We additionally enable
ads_data_redaction, which strips advertising identifiers from those signals
while consent is denied.
If you press Accept all, those parameters are updated to granted and the tags behave normally. If you press Decline, they stay denied for as long as your browser keeps the record.
5.2 What Google receives once you consent
- Pages viewed on this site, and the order and timing of those views.
- Approximate location derived from your IP address (typically city level; the full address is not stored by Analytics).
- Device type, browser, operating system and screen size.
- How you arrived — for example a search result, an advertisement, or a direct visit.
- Whether you completed an action we count as a conversion, such as subscribing to the newsletter.
Google acts as an independent controller for some of this processing and as our processor for the rest. Its own handling of the data is governed by the Google Privacy Policy and the Google Ads Data Processing Terms. You can opt out of Google Analytics in every website you visit using the Google Analytics Opt-out Browser Add-on, and you can control ad personalisation in your Google My Ad Center.
5.3 Remarketing
If you consent to advertising cookies, we may show you our own advertisements again on other sites in the Google network. Those audiences are built from broad behaviour such as “visited the Chicken Road page”. We never upload email addresses or other identifiers to build them, and we never combine advertising data with the messages you send us.
6. Who we share data with
We do not sell personal data and we do not share it for anyone else's marketing. We use a short list of service providers, each bound by a data processing agreement:
| Provider | Role | Data |
|---|---|---|
| Our hosting provider | Serving the website | Server log data |
| Google Ireland Ltd | Analytics and advertising measurement | Usage data, with consent |
| Our email provider | Delivering replies and the newsletter | Email address, message content |
We will also disclose data where we are legally required to, or where it is necessary to establish or defend a legal claim.
7. International transfers
Some of our providers process data outside the European Economic Area and the United Kingdom, principally in the United States. Where that happens we rely on the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum, and — where the provider is certified — the EU–US Data Privacy Framework. You may request a copy of the safeguards in place by writing to the privacy address below.
8. How long we keep things
| Data | Retention |
|---|---|
| Contact form messages and email correspondence | 24 months from the last message in the thread |
| Newsletter subscription | Until you unsubscribe, plus 30 days |
| Server logs | 30 days, then deleted automatically |
| Consent record in your browser | 12 months, or until you clear your browser storage |
| Google Analytics event data | 14 months, the shortest retention Google offers |
9. Your rights
Under the GDPR and UK GDPR you have the right to:
- ask what personal data we hold about you and receive a copy (access);
- have inaccurate data corrected (rectification);
- have data deleted where we no longer have a good reason to keep it (erasure);
- ask us to pause processing while a dispute is resolved (restriction);
- receive data you gave us in a portable, machine-readable format (portability);
- object to processing carried out on the basis of legitimate interests;
- withdraw consent at any time, without affecting processing already carried out.
Write to privacy@leadrouteoravex.org and we will respond within one calendar month. Exercising these rights is free. If you are unhappy with our response you may complain to your national supervisory authority — in the UK, the Information Commissioner's Office; in the EU, the authority for your country of residence.
10. California residents
Under the CCPA as amended by the CPRA you have the right to know what personal information is collected, to delete it, to correct it, and to opt out of its “sale” or “sharing”. We do not sell personal information and we have not done so in the preceding twelve months. Allowing advertising cookies may constitute “sharing” for cross-context behavioural advertising under California law; declining them in our cookie banner, or pressing Cookie settings in the footer and changing your answer, is our Do Not Sell or Share mechanism. We also honour the Global Privacy Control signal where your browser sends one. You will never be discriminated against for exercising any of these rights.
11. Children
This site is written for a general adult audience and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, write to us and we will delete it.
12. Security
The site is served over HTTPS with HSTS. Access to the mailbox and to analytics accounts is limited to the editors who need it and protected with two-factor authentication. No system is perfectly secure, but a static site that stores almost nothing is a small target by design. Should a breach occur that is likely to risk your rights, we will notify the relevant supervisory authority within 72 hours and inform you directly where the law requires it.
13. Changes to this policy
We will update this page when our processing changes. The version number and the “last updated” date at the top always reflect the current text, and material changes are announced in the newsletter and by re-presenting the cookie banner where consent is affected.
14. How to contact us
Privacy and data protection: privacy@leadrouteoravex.org
Everything else: hello@leadrouteoravex.org or the
contact form.
See also our Cookie Policy for the specific cookies used, and our Terms of Use.