1. Scope and controller information
This policy describes the supplied static website at choicecabinstorypuls.mom. The proposed operator is Choice Cabin Story Puls Media Ltd. The company name, number and registered address displayed on this build are illustrative and unverified; they do not establish a legally registered controller. A live operator must confirm its identity, hosting arrangements and mailbox availability before collecting correspondence. This disclosure should not be interpreted as independent verification of those details.
2. Information collected and why
The site has no user accounts, checkout, advertising pixels or embedded analytics. Browsing does not submit contact-form text to a website server. The form validates information on your device and prepares an email link. Your name, email address, topic and message leave the page only if you choose to open your email application and send the draft. Do not include payment details, passwords, identification documents or sensitive health information.
When email correspondence is received by a configured operator, it may be used to answer questions, investigate corrections and maintain necessary records. The intended lawful basis is legitimate interests in handling requested correspondence, or compliance with legal obligations where applicable. Optional tracking would require an appropriate separate assessment and, where required, prior consent.
3. Local storage and cookies
A localStorage record remembers cookie choices for up to 180 days before the site asks again on a subsequent visit. It contains category selections, a version and a timestamp, not your contact message. No optional analytics or functional cookies are currently installed. You can change the preference from any footer or remove site data in your browser. See the cookie policy for the complete storage inventory.
4. Hosting and third-party processors
The supplied files contain no external fonts, remote images, map embeds or third-party JavaScript. A deployment host may nevertheless receive IP addresses, requested URLs, browser information and security logs when serving pages. An email provider may process messages you send. No host or email processor has been specified in this build, so provider names, locations and actual server retention cannot truthfully be listed here.
A live operator must identify applicable providers, use appropriate processing agreements and assess international transfer safeguards. External club and league links take you to independently operated services with their own privacy notices. Following a link is different from this site embedding a tracker.
5. Retention and security
The intended correspondence retention period is up to twelve months after an enquiry closes, unless a legal requirement or active dispute justifies longer storage. This is an operating policy to implement, not an automatic deletion feature in these files. Hosting logs require a separately documented schedule. Local consent expires logically after 180 days and is removed when next read; clearing browser data removes it sooner. Access controls, secure mail accounts and encrypted hosting should protect any live deployment, but no service can guarantee absolute security.
6. GDPR, UK GDPR and California rights
Where applicable, you may request access, correction, deletion, restriction or portability of personal information, and object to processing based on legitimate interests. You may withdraw consent without affecting earlier lawful processing. California residents may have rights to know, correct and delete information, and to opt out of sale or sharing; this build does not sell or share personal information for cross-context behavioural advertising. Exercising rights should not result in unlawful discrimination.
Verification may be needed to protect your information. Applicable exemptions and response periods depend on the law, generally one month for GDPR requests and 45 days for covered California requests. You may complain to the UK Information Commissioner’s Office or your relevant supervisory authority.
7. Privacy and DPO contact
Address privacy requests to [email protected], with “Privacy request” in the subject. This is the designated privacy/DPO enquiry route, not a claim that a statutory Data Protection Officer has been appointed. Mailbox operation must be verified before launch. Material changes to actual processing require an updated notice and, where necessary, renewed consent.