Privacy Policy

Last updated:

This policy explains what personal information Fipsum uses when you visit the website or contact us, why we use it, and the choices and rights available to you.

Who is responsible for your information?

Fipsum is responsible for the personal information described in this policy and acts as the data controller. If you have a privacy question or want to exercise a data protection right, please use our contact form.

Information we use and why

Contact form messages

When you use the contact form, you provide your name, email address, message category, subject and message. We use this information to read and respond to your enquiry, investigate a bug or correction, consider a suggestion, and manage any necessary follow-up.

The website does not keep a separate submission record. Your message is delivered through an authenticated email service to a private recipient mailbox. This means the message is handled by the outgoing mail service and the receiving mailbox provider. Your email address is used as the Reply-To address so that we can answer you; the private recipient address is not published.

Our lawful basis is legitimate interests: it is in our interests, and normally in yours, to respond when you choose to contact us and to use relevant feedback to maintain and improve Fipsum. If your message is a data protection request or complaint, we may also need to use it to comply with a legal obligation.

Google Analytics

We use Google Analytics 4 to understand how people use Fipsum. Analytics is optional. Google Consent Mode starts with analytics and advertising-related consent denied, and the Google Analytics tag is not loaded until a valid analytics consent choice applies. Rejecting Analytics does not stop the essential website tools from working.

If you accept, the website loads Google Analytics from Google. The information collected by the standard implementation can include pages viewed, referral information, session activity, approximate location, and browser and device information. We use aggregated reports to understand use of the site and improve it. Google receives and processes this information to provide the Analytics service.

The expected first-party Analytics cookies are _ga, used to distinguish visitors, and _ga_<container-id>, used to retain session state. Google documents a default lifetime of two years for both, although browser controls may shorten this.

Our lawful basis for Analytics processing is consent. We also ask for consent before non-essential Analytics cookies are stored or read.

Your analytics choice

For visitors covered by the European Regulations message, including visitors in the UK, EEA and Switzerland, Google's Privacy & messaging consent management platform is the authoritative source for Google advertising and Analytics consent. The Google Analytics tag is loaded only when the platform reports that analytics storage has been granted. A previous Fipsum analytics choice does not override a decision from Google's platform.

Outside those regions, Fipsum continues to offer its own explicit Accept analytics and Reject analytics choices. We store that choice in the first-party cookie fipsum_cookie_consent_accepted for one year. It records the consent version and whether necessary, analytics and marketing categories are allowed; it does not contain your name or email address. Advertising-related consent remains denied through this choice.

This preference cookie is necessary to remember the choice you asked the site to apply. Our lawful basis for any personal-data processing associated with this preference is legitimate interests in respecting and recording your choice without repeatedly showing the banner.

You can select Cookie settings at any time. In regions covered by Google's platform, this reopens Google's consent message; elsewhere it reopens Fipsum's analytics choices. Rejecting Analytics removes known accessible Google Analytics cookies for the site and reloads the page if Analytics had already started. Withdrawal does not affect processing that took place before you withdrew consent.

AdSense verification and Google's consent platform

Fipsum uses Google AdSense and Google Privacy & Messaging. When these Google services are loaded, your browser makes requests to Google which may include technical information such as your IP address and browser user agent.

Advertising storage, ad user data and ad personalisation are denied by default. In regions covered by the European Regulations message, only a valid choice made through Google's platform can change those Google advertising consent signals.

Our lawful basis for the limited technical processing needed to verify the site and provide the consent platform is legitimate interests in preparing and operating a compliant website integration. Consent is required before optional advertising storage or personalisation is permitted where consent applies.

Google Fonts

Fipsum currently requests the Geist and Instrument Serif font files through Google Fonts on public pages. Your browser first requests a stylesheet from fonts.googleapis.com and then font files from fonts.gstatic.com. These requests happen whether you accept or reject Analytics and necessarily send Google technical request information such as your IP address and browser user agent.

Our lawful basis is legitimate interests in presenting a consistent, readable website. Google handles the request data under its own terms and privacy information.

Technical and security logs

The website processes technical request information needed to operate, secure and protect the service. Depending on the request or event, this may include an IP address, requested URL, date and time, referrer, browser information and diagnostic details.

We use this information to operate the service, diagnose faults, prevent abuse and investigate security incidents. Our lawful basis is legitimate interests in running a reliable and secure website.

Who receives information?

  • Our authenticated email delivery service and receiving mailbox provider handle contact messages.
  • Google receives Analytics information only after Analytics is accepted.
  • Google receives the technical request needed to load the production AdSense verification and Privacy & messaging integration.
  • Google receives the technical requests needed to serve the externally hosted fonts on public pages.
  • Hosting and website administration services may process technical information where necessary to operate and secure the site.

How long information is kept

  • The Fipsum consent-choice cookie used outside Google CMP-covered regions expires after one year unless you replace it with a new choice or remove it sooner.
  • In covered regions, Google's consent platform records the consent decision needed to apply and demonstrate the visitor's choices. Its record can be replaced or withdrawn through Cookie settings.
  • Google documents a default two-year lifetime for the expected Google Analytics cookies. Rejecting Analytics removes known accessible Analytics cookies set for the site.
  • A confirmed retention period for Analytics event and user data has not yet been documented here.
  • Contact messages are not retained as website submissions, but an email copy exists in the recipient mailbox. Correspondence is kept only for as long as necessary to respond to and manage the enquiry and is normally deleted within 12 months. It may be kept longer where reasonably necessary for continuing legal or security matters.

International processing

Google may process AdSense verification, consent-platform, Analytics and font-request information in countries outside the UK. Information about how Google handles information and international transfers is available in Google's Privacy Policy. Google also publishes details of Google Analytics cookie usage.

Your data protection rights

Depending on the circumstances, you may have rights to:

  • ask for a copy of your personal information;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete information;
  • ask us to restrict how information is used;
  • object to processing based on legitimate interests;
  • receive or transfer information you supplied where the right to data portability applies; and
  • withdraw consent for Analytics at any time.

Your right to object: you can object to our use of personal information where we rely on legitimate interests. We will stop unless we have a compelling lawful reason to continue.

Use the contact form to make a request. We may need enough information to understand the request and confirm that it relates to you.

You also have the right to complain to the Information Commissioner's Office. You can find guidance and submit a complaint through the ICO complaints service.

Changes to this policy

We will update this page when the way Fipsum uses personal information changes. Material new uses will be explained before they begin.