Last updated: July 1, 2026
This Privacy Policy explains how Scraps from the Loft (“we”, “us”, or “the Site”) collects, uses, stores, and shares personal data when you visit scrapsfromtheloft.com, contact us, subscribe to the newsletter, leave a comment, or interact with advertising and embedded content.
1. Data controller
The data controller is:
Scraps from the Loft
London, United Kingdom
Email: admin@scrapsfromtheloft.com
2. Personal data we collect
Browsing and technical data
When you visit the Site, our servers and technical service providers may automatically process information such as your IP address, browser and device type, operating system, requested pages, referring page, date and time of access, diagnostic information, and security events. This information is used to deliver the Site, maintain security, prevent abuse, diagnose errors, and produce aggregated technical statistics.
Contact form
If you contact us through the Contact Us page, we process the information you provide, which may include your name, email address, and message. We use this information only to read, manage, and respond to your request, and to protect the Site from spam or abuse.
Newsletter
If you subscribe to the newsletter, we process your email address and the subscription information generated by the newsletter system, such as subscription status, confirmation records, and unsubscribe information. We use this data to send the newsletter and manage your subscription. You may unsubscribe at any time by using the link included in each newsletter or by contacting us.
Comments
If comments are enabled and you leave a comment, WordPress may process the information entered in the comment form, your IP address, browser user-agent string, the date and time of the comment, and any information required for moderation and spam prevention. If you use an email address associated with Gravatar, an anonymized string derived from that address may be sent to the Gravatar service to check whether you use it.
Advertising and consent choices
The Site uses Google AdSense to display advertising. Depending on your location and the choices you make through the consent message, Google and its advertising partners may process device identifiers, IP addresses, browsing information, consent signals, and information about interactions with advertisements. Advertising may be personalized or non-personalized according to the applicable law, the settings available in Google’s consent platform, and your choices.
The Site uses Google’s Privacy & Messaging consent management platform to collect and communicate privacy choices for advertising and related purposes in applicable regions.
Cookies and similar technologies
The Site uses cookies, local storage, session storage, and similar technologies. Some are necessary for the operation, security, preferences, and administration of the Site. Others may be used for advertising or embedded third-party content and require consent where applicable. More information is available in our Cookie Policy.
Embedded content and external links
Articles may include embedded or linked content from third-party websites, such as video, audio, social media, or other media services. When such content is loaded or a third-party link is opened, the external provider may receive technical information and may use cookies or similar technologies under its own privacy policy.
3. Purposes and legal bases
We process personal data for the following purposes and legal bases:
- Operating, securing, and maintaining the Site: our legitimate interests in providing a reliable and secure website.
- Responding to contact requests: taking steps at your request and our legitimate interest in managing correspondence.
- Sending the newsletter: your consent. You may withdraw consent at any time without affecting processing carried out before withdrawal.
- Managing comments and preventing abuse: our legitimate interests in moderating the Site and protecting it from spam and unlawful activity.
- Advertising, profiling, and non-essential tracking: your consent where required by law.
- Complying with legal obligations and handling claims: compliance with legal obligations and our legitimate interest in establishing, exercising, or defending legal claims.
4. Service providers and recipients
Personal data may be processed by providers that support the operation of the Site, including:
- the hosting and email providers;
- Cloudflare, for content delivery, performance, network security, and protection against malicious traffic;
- Google, for AdSense advertising, consent management, and Google Fonts;
- the WordPress software and installed plugins used to operate the Site, including the newsletter system;
- providers of embedded media or services that you choose to load or visit.
These providers process data under their own terms, privacy policies, and applicable data-processing arrangements. Data may also be disclosed where required by law or to protect the rights, security, and integrity of the Site and its users.
5. International data transfers
Some service providers may process data outside the European Economic Area. Where required, transfers are based on an adequacy decision, standard contractual clauses, or another lawful transfer mechanism, together with appropriate safeguards.
6. Data retention
- Contact requests: retained for the time necessary to answer and manage the request and, where appropriate, to protect legal rights.
- Newsletter data: retained until you unsubscribe or request deletion, subject to limited records that may be retained to demonstrate or respect your opt-out.
- Comments: retained for as long as the comment remains published or is needed for moderation, security, or legal purposes.
- Technical and security logs: retained for the periods required by the hosting, security, and network providers and for no longer than reasonably necessary for security and diagnostic purposes.
- Consent choices: retained for the period necessary to remember and demonstrate your privacy choices, subject to the settings of the consent platform.
7. Your rights
Where the GDPR or another applicable privacy law applies, you may have the right to:
- obtain access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your data;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive certain data in a portable format;
- withdraw consent at any time;
- lodge a complaint with a competent supervisory authority.
To exercise your rights, contact admin@scrapsfromtheloft.com. We may need to verify your identity before acting on a request.
If you are in Italy, you may also lodge a complaint with the Garante per la protezione dei dati personali.
8. Privacy and cookie settings
You may review or change your advertising consent choices using the “Privacy and cookie settings” link made available by the Google consent platform. You may also manage cookies through your browser settings. Disabling necessary technologies may affect the operation of the Site.
9. Children
The Site is intended for a general audience and is not directed specifically at children under 16. We do not knowingly request children’s personal data for newsletter subscriptions or other optional services.
10. Security
We use reasonable technical and organizational measures to protect personal data. No internet transmission or storage system can, however, be guaranteed to be completely secure.
11. Changes to this Policy
We may update this Privacy Policy when the Site, its services, or legal requirements change. The date at the top of the page identifies the latest revision.
12. Contact
Questions about this Privacy Policy may be sent to admin@scrapsfromtheloft.com.