Privacy policy
Tommy & James has no accounts, no logins, no newsletter and no comment section, so there is nowhere on the site to enter personal or health information. Server access logs and a Cloudflare security cookie are the only data involved. Nothing is sold, shared or used to build a profile of you.
This policy explains what Tommy & James collects, why, and what you can do about it. It is written to be read rather than to be survived.
What does this site actually collect?
Very little. Tommy & James has no accounts, no logins, no newsletter, no comment section and no shopping cart. There is nowhere on this site to type your name, your email address or anything about your health, and no such form exists to be filled in.
| Data | Why it exists | How long it is kept |
|---|---|---|
| Server access logs: IP address, timestamp, page requested, browser user agent | Automatically written by the web server. Used to keep the site up and to spot abuse | Rotated and deleted on the host’s standard schedule |
| Content delivery and security logs held by Cloudflare | The site sits behind Cloudflare, which filters malicious traffic before it reaches the server | Per Cloudflare’s own retention policy |
| Email you choose to send | Only if you write to us through the contact page | Kept while the exchange is open, then deleted |
Does this site use cookies or tracking?
Tommy & James sets no advertising cookies, runs no ad network, and does no cross-site tracking or behavioural profiling. Cloudflare may set a strictly necessary security cookie to distinguish real visitors from automated attacks. Your browser may store nothing else from this site.
Fonts are loaded from Google Fonts, which means your browser makes a request to Google’s servers to fetch the typeface files. That request carries your IP address to Google. It is the one third-party request this site makes on a normal page view.
Is any of this sold or shared?
No. Tommy & James does not sell, rent, trade or share personal information with anybody. There is no data broker relationship, no advertising partner and no analytics vendor building a profile of you. Under the California Consumer Privacy Act, the answer to “do you sell my personal information” is no, and there is nothing to opt out of.
What are my rights over my data?
If you are in the European Economic Area or the United Kingdom, the GDPR gives you the right to access, correct, delete, restrict or port your personal data, and to object to processing. If you are in California, the CCPA and CPRA give you rights to know, delete, correct and limit. Residents of Colorado, Connecticut, Virginia, Utah and other states with comparable laws have similar rights.
In practice this site holds almost nothing about you. If you have emailed us, you can ask for that correspondence to be deleted and it will be. Requests go through the contact page and are answered within 30 days.
What is the legal basis for processing?
Where the GDPR applies, the basis is legitimate interest: keeping the website available, secure and functioning. No processing here relies on consent, because no optional tracking is performed. No special category health data about you is collected at any point. Reading an article about perimenopause does not tell this site anything about you personally, and no record connecting a visitor to a topic is created or kept.
Children
This site is written for adults and is not directed at children under 13. No information is knowingly collected from children. If you believe a child has sent us personal information, write to us and it will be deleted.
Third parties and links
Articles link out to primary sources such as research journals and government health sites. Those organisations have their own privacy policies and this one does not cover them. Following a link means their rules apply.
Security
The site is served over HTTPS everywhere, sits behind a content delivery network with security filtering, and is kept patched. No system is perfectly secure, but there is also no store of personal data here worth breaching.
Changes to this policy
If this policy changes materially, the change and its date will be published on this page. The last-reviewed date at the top of the page tells you when it was last checked.
Contact
Privacy questions and data requests go through the contact page.