Privacy Policy
Last updated: September 23, 2026
CultIndies respects your privacy. This policy explains what personal information we collect when you visit cultindies.com, use our tools, subscribe to our newsletter, contact us, or buy from us; why we use it; who may receive it; and the choices available to you.
For the purposes of applicable data-protection law, the data controller is [legal name of the CultIndies owner or business], trading as CultIndies (“CultIndies”, “we”, “us”, or “our”).
Contact
For privacy questions, requests, or concerns, contact us at:
- Email: [email protected]
- Postal address: [business or correspondence address, if applicable]
- Data protection contact: [name, role, or same privacy email]
If you are based in the United Kingdom, European Economic Area, or another jurisdiction with similar data-protection rights, you may also have the right to complain to the relevant supervisory authority. See Your rights.
What we collect
The information we collect depends on how you use CultIndies.
Information you provide
You may provide us with:
- Contact details, such as your name and email address, when you contact us or subscribe to the newsletter.
- Newsletter preferences and consent records, including the date, time, and method by which you subscribed or unsubscribed.
- Messages and correspondence you send to us through email, contact forms, or other direct communications.
- Order and transaction information, if you make a purchase, such as the products purchased, order details, billing details, delivery details, and payment status. We do not store full payment-card details where payments are handled by a third-party payment provider.
- Information you choose to submit when using interactive tools, forms, or other site features.
Information collected automatically
When you browse the site, technical information may be collected automatically by our hosting, security, analytics, and service providers. This may include:
- IP address
- Browser type and version
- Device type and operating system
- Referring URL and pages visited
- Approximate location derived from IP address
- Date, time, and duration of visits
- Site interactions and error information
- Cookies or similar identifiers, where used and permitted
We use this information to operate, secure, maintain, understand, and improve CultIndies.
How we use information
We use personal information to:
- Provide, operate, and maintain the website, its content, tools, and services.
- Process and fulfil orders, payments, deliveries, refunds, and customer-support requests.
- Send the newsletter when you have chosen to subscribe.
- Respond to messages, questions, and other requests.
- Protect the site, users, and services against spam, fraud, abuse, and other security threats.
- Diagnose technical issues, measure performance, and improve content and usability.
- Meet legal, accounting, tax, and regulatory obligations.
- Establish, exercise, or defend legal claims where necessary.
We do not sell personal information.
Legal bases for processing
Where UK GDPR, EU GDPR, or similar law applies, we process personal information under one or more of the following legal bases:
| Purpose | Legal basis |
|---|---|
| Sending newsletters | Your consent. You may withdraw consent at any time by using the unsubscribe link in an email or contacting us. |
| Responding to enquiries and providing requested services | Taking steps at your request before entering a contract, performing a contract, or our legitimate interests in communicating with you. |
| Processing purchases and fulfilling orders | Performance of a contract and compliance with legal obligations. |
| Operating, securing, and improving the website | Our legitimate interests in running a secure, reliable, and effective website and business. |
| Preventing spam, fraud, and abuse | Our legitimate interests in protecting the site, users, and services. |
| Keeping required records and responding to lawful requests | Compliance with legal obligations and, where relevant, our legitimate interests in protecting our rights. |
Where we rely on legitimate interests, we consider whether those interests are outweighed by your rights and freedoms.
Newsletter
If you subscribe to the CultIndies newsletter, we use your email address to send the emails you requested.
We may record information necessary to manage the subscription, including:
- Your email address
- Subscription and confirmation status
- Subscription source, date, and time
- Unsubscribe requests
- Limited delivery or engagement information, if provided by our newsletter service
You can unsubscribe at any time by using the unsubscribe link in any newsletter email or by contacting us at [email protected].
We retain newsletter-subscription information until you unsubscribe or ask us to delete it, except where we need to retain limited suppression information to ensure that we honour your unsubscribe request or meet a legal obligation.
Newsletter provider: [insert provider name and link, if applicable].
Cloudflare Turnstile
We use Cloudflare Turnstile on selected forms to help distinguish human visitors from automated traffic and to protect the site against spam, fraud, and abuse.
When Turnstile runs, Cloudflare may process technical and security-related information required to provide its bot-detection service. This can include information such as your IP address, browser and device characteristics, User-Agent, TLS or browser signals, the Turnstile sitekey, and the website origin associated with the widget.
Turnstile is used solely to protect our forms and services. We do not use Turnstile to make decisions producing legal or similarly significant effects about you.
Cloudflare describes its handling of personal data for Turnstile in its Turnstile Privacy Addendum. If you have questions about Cloudflare’s processing of Turnstile data in connection with CultIndies, you may contact us at [email protected].
Our legal basis for using Turnstile is our legitimate interest in protecting the site, preventing spam and fraud, and maintaining the security and availability of our services.
Cookies and similar technologies
CultIndies may use cookies, local storage, and similar technologies to make the site function, remember preferences, maintain security, and understand how the site is used.
Cookies may be:
- Strictly necessary, meaning they are required for core site functions, security, or fraud prevention.
- Functional, meaning they remember choices or settings.
- Analytics or performance cookies, meaning they help us understand site use and improve the service.
- Marketing cookies, if we introduce advertising or marketing technologies that use them.
Where required by law, we will ask for consent before setting non-essential cookies. You can also manage cookies through your browser settings. Blocking some cookies may affect site functionality.
Cookie-management provider: [insert provider name or remove this line if none].
For more detailed information, see our Cookie Policy if one is available.
Analytics
We may use privacy-conscious analytics and performance tools to understand how visitors use CultIndies. These tools may collect or receive technical information such as page views, approximate location, device and browser information, referral sources, and interaction data.
We use analytics in aggregated or pseudonymous form where possible. We do not use analytics to identify you personally unless you provide identifying information separately.
Analytics providers: [list all providers and links, for example: Cloudflare Web Analytics, Google Analytics, Plausible, Fathom, or remove this section if no analytics are used].
Payments and purchases
If you make a purchase, payment processing is handled by [payment provider name]. The provider receives the payment information necessary to process the transaction under its own privacy policy and terms.
CultIndies may receive and retain transaction information needed to:
- Confirm and fulfil your order
- Provide customer support
- Issue refunds where appropriate
- Keep accounting, tax, and legal records
- Prevent fraud and abuse
We do not receive or store full payment-card numbers unless explicitly stated at the point of collection.
Payment provider: [insert provider name and privacy-policy link].
Service providers and sharing
We share personal information only where necessary to operate CultIndies, provide services you request, comply with law, or protect our rights and users.
Depending on the services in use, recipients may include:
- Cloudflare, for website hosting, delivery, security, and Turnstile.
- [Newsletter provider], for subscription management and newsletter delivery.
- [Payment provider], for payment processing.
- [E-commerce platform / fulfilment provider], for orders, delivery, and customer support.
- [Analytics provider], for website analytics and performance measurement.
- Professional advisers, such as accountants, lawyers, insurers, or auditors, where necessary.
- Government authorities, regulators, courts, or law-enforcement bodies, where legally required or necessary to protect rights and safety.
- A buyer, successor, or adviser in connection with a merger, sale, restructuring, financing, or transfer of all or part of the business.
We require service providers to handle personal information only as necessary to provide their services and in accordance with applicable law.
International transfers
CultIndies and its service providers may process personal information in countries other than the country where you live, including countries that may have different data-protection laws.
Where required, we take appropriate steps to protect transferred information. Those steps may include relying on an adequacy decision, standard contractual clauses, or another lawful transfer mechanism recognised by applicable data-protection law.
For information about Cloudflare’s processing and international transfers, please see Cloudflare’s applicable privacy documentation, including the Turnstile Privacy Addendum.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including legal, accounting, tax, and reporting requirements.
Retention periods generally depend on the type of information:
| Information | Typical retention approach |
|---|---|
| Newsletter subscription data | Until you unsubscribe or request deletion, subject to limited suppression records needed to respect an unsubscribe request. |
| Contact messages | Up to [insert period, for example: 24 months] after the final correspondence, unless a longer period is needed for a legitimate purpose. |
| Order and transaction records | For the period required by applicable tax, accounting, and legal obligations. |
| Security, fraud-prevention, and server logs | For [insert period, for example: 30–90 days], unless a longer period is needed to investigate an incident or meet a legal obligation. |
| Analytics data | For the retention period configured with the relevant provider, or until it is aggregated or deleted. |
We may retain information for longer where necessary to comply with law, resolve disputes, enforce agreements, or protect legal rights.
Your rights
Depending on where you live and the law that applies, you may have rights to:
- Ask whether we process your personal information and request access to it.
- Request correction of inaccurate or incomplete information.
- Request deletion of your information in certain circumstances.
- Request restriction of processing in certain circumstances.
- Object to processing based on legitimate interests.
- Withdraw consent at any time where we rely on consent. Withdrawal does not affect processing already carried out before consent was withdrawn.
- Receive personal information in a portable format, where applicable.
- Object to direct marketing at any time.
- Complain to a data-protection authority.
To exercise a right, email [email protected]. We may ask for reasonable information to verify your identity before acting on a request.
If you are in the UK, you may complain to the Information Commissioner’s Office.
If you are in the EEA, you may complain to the data-protection authority in your country of residence, place of work, or the place where you believe an infringement occurred.
Children
CultIndies is not directed to children under the age at which they can lawfully consent to the processing of personal data in their country. We do not knowingly collect personal information from children without appropriate consent.
If you believe a child has provided us with personal information without the required consent, please contact us at [email protected], and we will take appropriate steps to delete it.
Security
We use reasonable technical and organisational measures designed to protect personal information against accidental or unlawful loss, misuse, unauthorised access, disclosure, alteration, or destruction.
No internet transmission or storage system can be guaranteed completely secure. You should use appropriate care when transmitting information online.
Third-party links
CultIndies may link to third-party websites, platforms, shops, or services. We are not responsible for the privacy practices, content, or security of those third parties. Review their privacy policies before providing them with personal information.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or privacy practices.
When we make changes, we will update the “Last updated” date at the top of this page. If a change is material, we may provide additional notice where appropriate.
Contact us
For questions about this policy or how CultIndies handles personal information, contact:
[Legal name / CultIndies]
[email protected]
[postal address, if applicable]