Privacy notice

How we use information when you read Hoard & Heath.

Who is responsible

Hoard & Heath is published by Rivermark Property Ltd, the controller responsible for your personal information. Its registered address is 133 Whitmore Road, Harrow, England, HA1 4AG.

Rivermark’s ICO registration reference is ZC199403. For a privacy question or data request, email enquiries@rivermarkproperty.com or write to the address above.

When you visit the journal

Our hosting provider, Vercel, processes technical request information, including network addresses, to deliver the website, maintain its security and investigate faults. We rely on our legitimate interests in operating a reliable website for this processing.

Vercel Web Analytics helps us understand which stories people read and how they find the journal. It records aggregate page views, referral sources, approximate location, and browser, device and operating-system information. It does not use analytics cookies or identifiers that follow you across websites. Vercel creates a temporary visitor hash from a request and discards the visitor session after 24 hours.

We exclude search pages, newsletter confirmation pages and private article previews from analytics, remove fragments and strip query parameters except a small set of our Pinterest campaign labels. We do not send email addresses or newsletter confirmation links to analytics.

We use aggregate statistics to improve the journal and assess our legitimate interests in doing so. Vercel’s Pro plan provides a 12-month reporting window; this is not a promise that Vercel deletes every underlying record at that point. Hosting logs follow Vercel’s applicable retention settings. You can read Vercel’s explanation of Web Analytics or contact us to object to processing that relates to you.

Email and subscriptions

If you email us, we use the information you provide to reply and keep necessary correspondence, relying on our legitimate interests in handling your request. We review ordinary correspondence after 24 months from the last meaningful contact and delete information we no longer need, unless a legal duty or a complaint requires us to keep it.

When you subscribe, we use your email address to send a confirmation link. You join the newsletter only after confirming. We record your confirmation time and the version of the consent information you agreed to. We rely on your consent to send the newsletter; you can withdraw it using the unsubscribe link in each newsletter or by contacting us. Reading the website does not add you to a mailing list.

Resend stores our newsletter contacts and sends our emails. We keep your subscription information while you remain subscribed. After you unsubscribe, we retain the minimum information needed to honour that preference and record your previous consent. We review this retained information after 24 months and remove information that is no longer needed. We do not enable email open or click tracking.

Vercel’s BotID checks technical browser and request signals on the signup form to help prevent automated abuse. We rely on our legitimate interests in protecting the form and the people whose email addresses could otherwise be misused. Confirmation links expire within 24 hours; opening a link alone does not subscribe you.

Providers and international transfers

Vercel provides hosting, analytics and signup security; Resend provides newsletter delivery and contact management; and Google Workspace handles correspondence sent to our business email. Some provider processing takes place outside the UK, including in the United States. Where a restricted transfer is involved, we use an applicable adequacy route or contractual safeguards, including the UK transfer provisions where required. Contact us for information about the safeguards used for your data.

We do not sell your personal information or use the journal’s visitor information to build advertising profiles. Links to Pinterest and other websites take you to services covered by their own privacy notices.

Your rights

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your information, and object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time. You have an absolute right to object to direct marketing.

Contact us using the details above. We normally respond within one calendar month, subject to the rules for identity checks and complex requests. You can also complain to the Information Commissioner’s Office.

Last updated: 4 October 2026.