Privacy Notice

Who this notice covers

This notice applies to visitors to morethanonelesson.com and to anyone who contacts ML Info by email. It explains what personal data we process, why, and how long we retain it. The data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) is the entity operating this site under the trading name ML Info. We are a small editorial operation and hold no sensitive-category personal data.

What we collect

Passive data. When you visit the site, our web server records the request IP address, the user-agent string, the URL requested, the referrer and the response status code, for security and diagnostic purposes. Aggregated statistical data (page views per URL, browser mix) is derived from these logs. We do not run cross-site advertising trackers.

Voluntary data. When you email us, we hold your email address, name (if you provide one) and the content of the message for as long as we need it to answer the enquiry and to complete any follow-up. We do not add addresses to any marketing list.

Legal basis for processing

Our lawful basis for processing server-log data is legitimate interest under Article 6(1)(f) UK GDPR — specifically, the interest of running and defending a public-facing website. For correspondence we rely on Article 6(1)(a) consent (you have chosen to email us) and Article 6(1)(f) legitimate interest (we need to answer). No processing is based on Article 6(1)(b) contract, because we do not offer a service you contract for on this site.

How long we keep it

Server logs are retained for 30 days and then rotated out. Aggregated statistics derived from those logs are retained indefinitely because they contain no personal data. Email correspondence is retained for six years by default, which is the standard UK limitation period for many civil claims; a shorter or longer period may apply if the exchange is subject to a specific legal obligation.

Your rights under UK GDPR

You have the right to access any personal data we hold about you, the right to have inaccurate data corrected, the right to have data erased where the retention basis no longer applies, the right to restrict processing, the right to object to processing based on legitimate interest, and the right to data portability where technically possible. Requests should be made in writing to the editor address on the contact page. We respond within one month.

Third parties

We use a mainstream hosting provider located in the European Economic Area or the UK for the server itself. We do not use third-party advertising, retargeting or profiling services. Where we embed content from another website (for example, an SVG image on our own domain), no data is passed to that third party. Any link to an external site is followed at your discretion under that site’s privacy policy, not ours.

Complaints and ICO

If you are not satisfied with our handling of your personal data, please contact us first through the contact address on the site. You also have the right to lodge a complaint with the UK Information Commissioner’s Office at ico.org.uk, which is the statutory regulator for data-protection law in the UK.