Fluid Thoughts Privacy Policy

Welcome

Last updated: 20 October 2025

This Privacy Policy explains how we collect, use, and share information when you visit
Mirrorfire (https://www.fluid-thoughts.co.uk),
contact us, or subscribe to updates. We aim to handle your data with care, clarity, and respect.

1) Who we are

Controller: Mirrorfire — part of Fluid-Thoughts, the registered holder of this domain
(fluid-thoughts.co.uk).

Contact: Please reach us through our Contact Page.

2) How we collect information

  • Directly from you — when you submit a contact form or subscribe to updates.
  • Automatically — basic technical data from your device and browser (see Cookies & similar technologies).
  • From third parties — only where you’ve given permission (e.g., email delivery providers).

3) What we collect & why

3.1 Contact form messages

When you contact us, we process your name, email, and message to respond to your enquiry.

Legal basis: UK GDPR Art. 6(1)(f) legitimate interests (responding to messages) or Art. 6(1)(b) pre-contractual steps.

3.2 Comments (if enabled)

If you post a comment, we process the data you provide (e.g., name, email) and store the comment and metadata.

Legal basis: Art. 6(1)(f) legitimate interests (community moderation & site functionality).

3.3 Subscriptions / newsletter (if enabled)

If you subscribe, we process your email (and optionally your name) in order to send updates you request.

Legal basis: Art. 6(1)(a) consent. You can withdraw consent anytime via the unsubscribe link.

3.4 Basic technical data

Like most sites, we may collect IP address, browser type, pages visited, and timestamps for security and performance.

Legal basis: Art. 6(1)(f) legitimate interests (site security, debugging, and performance).

4) Cookies & similar technologies

Our site (WordPress) may use essential cookies for functionality (e.g., remembering comment details if you opt in).
If we enable analytics or other features in future, this policy will be updated and (where required) consent requested.

5) Third-party services we may use

  • Contact Form 7 — processes form submissions on our site. It does not itself store personal data
    beyond what is emailed to us. See the developer’s documentation for privacy details.
  • MailPoet (optional) — if newsletter is enabled, MailPoet stores your email (and name if provided) to deliver
    messages. You can unsubscribe at any time. See MailPoet’s privacy information.
  • Google reCAPTCHA v3 (optional) — if enabled to protect forms from spam, Google may collect device and usage
    data per Google’s Privacy Policy and
    Terms.
  • Email delivery — your message may pass through our email provider(s) to reach us.

6) How we share information

We do not sell your personal data. We may share data with service providers who help us operate the site and deliver emails,
under appropriate contracts and safeguards. We may disclose information if required by law or to protect our rights, users, or the public.

7) How long we keep information

  • Contact messages: kept as long as needed to handle your enquiry, then archived or deleted periodically.
  • Subscriber data: kept until you unsubscribe or we close the list.
  • Comments (if enabled): kept indefinitely as part of the site record unless removed under moderation or by request.
  • Technical logs: kept short-term for security and troubleshooting.

8) Security

We take reasonable technical and organisational measures to protect your data. No internet transmission is completely secure, but we work to keep risks low (e.g., using reputable plugins, updates, and access controls).

9) Your rights (UK & EU)

You may have the right to access, correct, delete, or restrict processing of your personal data, and to withdraw consent where processing is based on consent. You may also have the right to data portability and to object to certain processing.
To exercise these rights, please reach us through our Contact Page.

10) International transfers

Some providers may process data outside the UK. Where this happens, we rely on appropriate safeguards (e.g., UK adequacy decisions, Standard Contractual Clauses).

11) Children

Mirrorfire includes reflective stories and symbolic material that may be suitable for reading or relaying to children under adult guidance.
However, the site itself and its interactive features (contact forms, comments, subscriptions) are intended for use by adults.
We do not knowingly collect personal data from children.
If you believe a child has provided personal data, please reach us through the Contact Page so we can remove it promptly.

12) Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the most recent changes.

13) Contact

For any privacy or data-related questions, please reach us through our Contact Page.

14) Complaints

If you have concerns, please contact us first via the Contact Page.
You may also complain to the UK Information Commissioner’s Office (ICO):
ico.org.uk/make-a-complaint/.