Privacy notice

Who we are

The operator of this site is the controller for the personal data described here.

• Email: [email protected]
• Site: vrulum.co.uk

What this site is

Vrulum publishes articles and reference pages about emerging technology. You can read the site without an account. There is no comment system. The newsletter sign-up is not open, so we do not collect email addresses for a mailing list. Advertising and audience measurement are described under Advertising and analytics.

The only personal data we ask you to send us is through the contact form, or if you email [email protected] directly.

Contact form

If you send the form, we receive:

• your name
• your email address
• a subject, if you add one
• your message
• your confirmation that you have read this notice

The form also sends the address of the page you submitted, and a spam-check result from Cloudflare Turnstile. Turnstile processes technical data, including your IP address, to tell a person from an automated sender.

We use this information to read your message and reply to you. We do not use it for marketing, and we do not sell it.

The lawful basis is legitimate interests under UK GDPR Article 6(1)(f): responding to a message you chose to send, and keeping the form free of spam. You can object to that use. How to object is set out under Your rights.

Who else processes it

Two organisations process this data for us:

• Cloudflare hosts the site, runs the Turnstile spam check on the contact page, and delivers the message to our inbox. Cloudflare’s privacy policy is at cloudflare.com/privacypolicy.
• Google stores the message in the inbox [email protected] until we delete it. Google’s privacy policy is at policies.google.com/privacy.

Google also processes advertising and analytics data, described under Advertising and analytics. That use is separate from contact messages stored in the inbox.

How long we keep it

We delete contact emails after 12 months. Delete means we remove the message from the inbox we use for this site.

Cloudflare also processes connection data, such as IP addresses, to deliver the site and protect it from abuse. We do not use that data to measure an audience or to identify readers. Cloudflare’s privacy policy describes how long it keeps those logs.

Advertising and analytics

Where you give the required permissions and the service is available, the site can show Google AdSense advertisements. Google and its advertising partners may process identifiers, device and connection data to select and measure ads, including personalised ads. The AdSense tag stays blocked until the consent service reports explicit permission for advertising storage, advertising user data and personalisation.

With your separate analytics permission, Google Analytics measures page use. We block its tag until the consent service reports explicit analytics permission. We disable Google signals and advertising personalisation in Analytics and omit query strings and referrers from the page information we send. Contact and buying worksheet pages do not initialise these optional tags.

Optional advertising and analytics permissions default to denied for every visitor. The published Google consent message collects your choices where it is available. If consent information is unavailable, denied or unconfigured, the relevant tag stays blocked. On eligible pages, our consent bootstrap still contacts Google to retrieve and display the consent message. It does not initialise on contact or buying worksheet pages. You can also manage Google advertising preferences in Google Ads Settings.

Google describes how it uses this information in How Google uses information from sites or apps that use our services.

Cookies

Privacy and cookie settings. If the message cannot load, optional tags remain blocked; you can also clear this site's data in your browser.

Advertising and analytics cookies require the relevant permissions. Reopening your settings opens a fresh page with optional tags blocked while you review your choices. If you withdraw permission, we disable Analytics, remove its first-party cookies where accessible and reload the page to stop previously loaded optional libraries. Google manages its own consent record and advertising preferences.

The contact page loads Cloudflare Turnstile, and only that page does. The check may store a cookie, or similar data, in your browser so Cloudflare can complete it. We treat that storage as strictly necessary for security. It does not need a consent banner under PECR.

Sending data outside the UK

Cloudflare and Google may process personal data in the United Kingdom, the European Economic Area, the United States, and other countries. Their privacy policies describe the safeguards they use for those transfers.

Your rights

Under UK data protection law you can ask us to:

• tell you what personal data we hold about you
• correct it
• delete it
• restrict how we use it
• stop using it where we rely on legitimate interests

We do not use contact details to make automated decisions about you.

To use any of these rights, email [email protected]. We may need to confirm that you are the person the data is about.

You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Changes

If we change how we handle personal data, we will update this page and the date at the top.