Privacy Policy

Last updated: 29 May 2026

This policy explains what personal data Breach Culture collects, why we collect it, and the choices you have. We keep this short and plain, the same way we treat everything else.

Who we are

Breach Culture is the trading name of BREACH CULTURE LTD, a company registered in England and Wales under company number 16811167, with its registered office at 7 Farmfield Grove, Wirral, United Kingdom, CH46 9AL. We ("we", "us") run this website at breachculture.com and are the data controller for the information described below. You can reach us through our contact page or on Instagram at @breachgram.

What we collect and why

• Newsletter signup. If you subscribe, we collect your email address so we can send you occasional updates about new work. Lawful basis: your consent.
• Contact form. If you message us, we collect your name, email, and the content of your message so we can reply. Lawful basis: our legitimate interest in responding to you.
• Interview and review forms. If you take part in an interview or review through one of our forms, we collect the answers you provide so we can produce and check the piece. Lawful basis: your consent.
• Article comments. If you leave a comment on an article, we collect your name, email address, and the comment itself. Your name and comment appear publicly only after we approve them; your email is never published and is used only to contact you about your comment if we need to. Lawful basis: your consent.
• Analytics. We use Umami, an open source analytics tool that we host ourselves, to count page views, referrers, clicks on things like article links, and how far down a page people read. It sets no cookies and stores nothing on your device. The numbers we see are aggregate only. We cannot identify you, we do not build profiles, and nothing is shared with advertisers or anyone else. Lawful basis: our legitimate interest in understanding what gets read so we can make better work. Analytics records are deleted after 24 months. If you would rather not be counted at all, use the switch in the Cookies and analytics section below.

Who processes your data

We use a small number of trusted providers to run the site. They process data on our behalf:

• Netlify. Hosting, form handling (newsletter and contact).
• Vercel and Neon. Host our self managed Umami analytics service and its database. Only aggregate, cookieless analytics data passes through them.
• Formspree. Handling submissions from our interview and review forms. Formspree is based in the United States, so this involves a transfer of data outside the UK under appropriate safeguards.
• Google Fonts. Serves the typefaces used on the site, which may log your IP address as part of delivering those files.
• Google (Sheets). Stores article comments awaiting or after approval. Google is based in the United States, so this involves a transfer of data outside the UK under appropriate safeguards.
• Telegram. Notifies us of a new comment so we can review it. The alert includes the name and comment but is sent only to us, never published.

How long we keep it

We keep newsletter emails until you unsubscribe. We keep contact and interview messages only as long as we need them for the conversation or the piece they relate to, then we delete them.

Your rights

Under UK data protection law you can ask us to:

• see the data we hold about you,
• correct it if it is wrong,
• delete it,
• stop using it, and
• unsubscribe from emails at any time (every email includes an unsubscribe link).

To make any of these requests, contact us through the contact page. If you are not happy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies and analytics

This site does not use tracking or advertising cookies. Our analytics are cookieless. Your browser may store small technical items needed for the site to work.

Changes

If we change this policy we will update the date at the top of this page.