Privacy notice
Last updated 1 November 2026
Who we are
Vendicate is run by Jonathan Lee Bowers, trading as Vendicate. We decide how the personal data described here is used, which makes us its controller under UK data protection law. You can reach us at privacy@vendicate.co.uk.
What this covers
This notice covers visiting Vendicate’s website as it is now: a page about Vendicate while it gets ready to open, and this notice. There is nothing on it to fill in, no mailing list and no accounts yet. Before we ask anyone for their details, a fuller notice takes this one’s place.
When you visit
Like any website, our server notes each request it answers: the time, the page asked for, the page that linked to it, your device’s internet (IP) address and what your browser says it is.
| What | Why | How long |
|---|---|---|
| The server’s log of each request | To keep the site working and safe: to find faults and spot attacks | 30 days, then deleted |
| Daily totals counted from that log | To know how many times each page is read, which sites send people here, and the campaign a link was shared in | As long as they’re useful |
The daily totals hold no IP address and no browser details, and nothing in them tells one visitor from another. Requests that say they come from a robot are left out of them.
Our reason in law for both is our legitimate interest in running a website that works, is safe and is read. You can object to it (see Your rights).
If you email us
We keep your email and our reply for as long as we need them to deal with what you asked, then delete them. Our reason in law is our legitimate interest in answering you.
On your device
This website sets no cookies and runs nothing that follows you around the web. If you use the light and dark switch, your browser remembers your choice on your device. It never leaves your device, and clearing your browser’s site data removes it.
Who else handles it
- Cloudflare carries every request to our server and shields it from attacks, so it sees each request too.
- DigitalOcean runs the server the website is on, in London.
Each works for us under a contract that lets them use the data only as we instruct. Cloudflare’s network is worldwide, so a request may pass through a data centre outside the UK; where it does, it’s covered by the safeguards UK law requires for data sent abroad. We don’t sell anyone’s data, or share it with anyone else.
Your rights
You can ask us:
- for a copy of what we hold about you
- to correct it, or to delete it
- to stop or limit using it, or object to our using it
Write to privacy@vendicate.co.uk. Our log doesn’t hold names, so to find your visits we may need your IP address and when you visited. We answer within one month.
If you’re unhappy with how we’ve used your data, tell us first at the same address. We’ll acknowledge your complaint within 30 days and tell you what we’re doing about it. You can also complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes
When what we do with data changes, this notice changes first, with its new date at the top.