1. Introduction and responsibility
Inner Strength operates innerstrength.info as a men's everyday lifestyle and wellbeing publication in the United Kingdom. For the processing described in this notice, Inner Strength is the controller: it determines why information is used and how that use is organised. Our correspondence address is 24 Willowbrook Lane, London, United Kingdom. You can contact us at [email protected] or +44 7808 989923.
This notice covers visitors, people making general enquiries and people contacting us about their data. It explains the website's current features rather than describing hypothetical marketing services. We apply the UK General Data Protection Regulation and the Data Protection Act 2018, together with applicable rules on electronic communications and device storage.
2. Information we collect
The contact form asks for your full name, email address, message and confirmation that you have read this notice. These fields are transmitted to the server when you submit the form and are checked for completeness, format and permitted length. The form does not request an account, payment details, medical history or identity documents as part of an ordinary website enquiry.
The server also receives technical information needed to deliver pages, including an IP address, requested resource and browser request headers. Hosting systems may record technical request information in operational logs. A contact session contains a request-verification token, a form-opening time and a recent completion time to support validation and limit repeated requests. These technical values are separate from the visible form fields.
3. How we use information
The website processes contact-form fields to validate the current request and complete the form journey. Validation checks whether the name and message meet the required lengths, whether the email has a valid format and whether the privacy acknowledgement has been supplied. A successful request directs the browser to the thank-you page. Completing that journey does not subscribe you to a mailing list or create a personal account.
If you separately contact the published email address, the information you provide may be used to understand and reply to that correspondence. Technical information supports page delivery, error diagnosis and prevention of automated misuse. We do not sell personal information, build advertising audiences from form fields or create profiles of a reader's health and lifestyle.
4. Lawful bases for processing
Our legitimate interests support operating the publication, validating website requests, handling direct correspondence and preventing misuse of the contact function. We consider the purpose, the information needed and the reasonable expectations of a person using the website before relying on this basis. You may object to processing based on legitimate interests by explaining your particular circumstances.
A legal obligation may require particular information to be retained or disclosed where a relevant duty applies. Where optional device storage requires consent, we rely on an affirmative choice and provide a way to change it. The privacy checkbox confirms that this notice has been presented; it is not permission for marketing and does not remove your statutory data protection rights.
5. Contact form data and submission
The form requires all four visible fields. The name identifies the form entry, the email is checked for a recognised address format, the message supplies the text of the request and the checkbox acknowledges this notice. The server also verifies a session-bound token, checks a hidden automated-submission trap and applies a minimum completion interval before validating the visible fields.
A successful validation returns the thank-you destination to the browser. If validation fails, the page identifies the relevant field or explains the request error. Please keep the content focused on general website topics and avoid unnecessary sensitive details about yourself or another person. For a direct correspondence exchange, use the published email address and describe the subject clearly so the relevant information can be considered in context.
6. Cookies, local storage and analytics
A first-party session cookie is created on the contact page to support form request verification and submission timing. It has HttpOnly and SameSite restrictions and uses the Secure attribute when the connection is HTTPS. It is not an advertising identifier. The browser also stores your preference choice under the local-storage key innerstrength.consent, with a recorded selection time and an expiry period of 180 days.
No analytics, advertising pixels or behavioural tracking tools are installed. Accept All, Partial and Functional are recorded as distinct preference states, but none currently activates a tracking service. The Cookie Policy explains these controls and the difference between browser storage and server-side records.
7. Third-party services and recipients
Google Fonts supplies the Manrope and Inter font files. Stylesheets are compiled in advance and served locally by this website. The browser connects to Google Fonts to fetch typography resources and consequently sends technical connection data, which may include an IP address and browser information. A no-referrer policy reduces disclosure of the referring page address. These resource requests are distinct from an analytics preference.
The hosting provider processes HTTP requests and maintains the server environment on behalf of the operator. An email provider may process a separate message sent directly to the published email address. Information may also be disclosed to meet a binding legal requirement or establish, exercise or defend a legal claim. Personal information is not supplied to unrelated organisations for their own direct marketing.
8. International processing
The third-party font provider may process technical request data outside the United Kingdom. Its network routing and infrastructure determine where a particular request is handled. This website does not intentionally send contact form messages to those resource providers. Local photography is served from the website itself rather than an external image platform.
Where we arrange a restricted international transfer of personal information, we must identify an appropriate transfer mechanism, such as applicable adequacy regulations or approved contractual safeguards, and assess the circumstances as required. You may contact us for information about safeguards relevant to your information. We will not describe a transfer as protected solely because a provider is well known.
9. Data storage and retention
Contact-form fields are processed for the period necessary to validate and complete the current request. Technical session values follow the browser session and the server's session-management settings. A recent completion time may be used to limit repeated submissions during that session. The browser preference record has a 180-day application expiry, as explained in the Cookie Policy. These different information types have different operational purposes.
Separate correspondence sent directly to the published email address may be kept for as long as reasonably needed to deal with its subject and any applicable legal requirement. Hosting logs and backups follow the provider's operational arrangements. Retention is reviewed against the purpose, the type of information and any active dispute. Contact us if you need details about a particular exchange or technical request, including enough context to identify it.
10. Data protection and incidents
The application validates incoming fields, verifies a request token and applies session-based checks to the contact journey. Production connections should use HTTPS. Session cookies have HttpOnly and SameSite restrictions and use the Secure attribute on HTTPS connections. Access to the hosting environment and any separate correspondence systems is limited to authorised operators. Measures are considered in relation to the nature and purpose of the relevant processing.
No internet service can promise the absence of every incident. If a personal data breach occurs, we assess its effect, document the response and notify the regulator and affected people where the applicable legal thresholds require it. Please contact the published email address promptly if you believe personal information has been handled incorrectly or technical information has been exposed.
11. Your privacy rights and complaints
Depending on the circumstances, you may request access, correction, erasure, restriction, portability or object to processing. You can withdraw a consent-based browser preference without affecting processing that was lawful before withdrawal. We do not make decisions with legal or similarly significant effects solely through automated processing, and we do not carry out health or lifestyle profiling. Form validation is a technical check of a request.
Send privacy requests to [email protected], giving enough information to identify the relevant exchange or processing activity. We normally respond within one month, subject to lawful extensions and proportionate identity checks. Requests are normally free. You may complain to the Information Commissioner's Office through ico.org.uk. You do not have to contact us before approaching the regulator, and using the form does not restrict that right.
12. Contact information and policy updates
For questions about this notice, write to Inner Strength, 24 Willowbrook Lane, London, United Kingdom, or email [email protected]. Include the subject Privacy enquiry and identify the date, page or separate correspondence relevant to your question. Do not send identity documents unless we explain why a proportionate verification step is needed. A clear description helps us consider the specific processing activity involved.
This notice takes effect on 23 October 2026. We update it when website features, recipients or processing purposes change. Material changes will be explained in the updated notice and, where appropriate, communicated before a new use begins. The date identifies the current published notice; an update does not retrospectively remove rights relating to an earlier processing activity.
Related policies