Privacy

Privacy policy

What this site collects, why, and what you can do about it. In plain English, with the regulatory references where they matter.

Last updated 17 May 2026

Who we are (the ‘data controller’)

The Committee Room is published by:

Known by One, LLC
131 Continental Drive, Suite 305
Newark, Delaware 19713
United States

Email: contact@thecommitteeroom.org.uk

Known by One, LLC is the data controller for the purposes of UK GDPR and the Data Protection Act 2018. Because the site is targeted at UK readers, UK data protection law applies to our processing of your personal data, even though the company is registered in the United States.

What we collect, and why

Server logs. The site is hosted on Vercel. When you visit, Vercel automatically records standard request information — your IP address, the page you requested, the time, your browser user-agent, and the referring URL. We use this for security (blocking abuse), to diagnose technical errors, and to understand in rough aggregate which pages people read. Legal basis: legitimate interests (running and securing the site).

Google Analytics 4 — only if you accept.When you first visit the site, a consent banner asks whether you want to allow Google Analytics. If you accept, we load Google’sgtag.js script (measurement ID G-TDV964Z9GC), which sets cookies in your browser and sends Google information about your visit: pages viewed, time on page, device type, country (derived from IP), referring source. We use this to understand which guides help readers and where to put editorial effort. Legal basis: your consent (UK PECR and UK GDPR Article 6(1)(a)). You can withdraw consent at any time using the controls below; that immediately stops new analytics events.

Email correspondence. If you email us, we keep the email and our reply for as long as is sensible to handle the conversation and any follow-up. Legal basis: legitimate interests (responding to you).

Tool summary emails — only if you ask. Some interactive tools (currently the Temporary Event Notice tool) include an optional “email me this summary” field. If you fill it in and submit, we pass your email address and the on-screen answer to Resend (Resend, Inc., USA) to deliver one email. We do not store the address ourselves and we do not add you to any mailing list. Resend retains delivery logs (including your address and the message) per their privacy policy. Legal basis: performance of a service you have specifically requested (UK GDPR Article 6(1)(b)).

Nothing else. We do not run advertising pixels, remarketing tags, social-media trackers, or fingerprinting scripts. We do not maintain accounts or a newsletter.

Cookies

Cookies and similar storage set by this site fall into three buckets.

Strictly necessary — always on. We use a single browser localStorage entry called tcr-analytics-consent to remember whether you accepted, rejected, or have not yet answered the analytics banner. Without it, the banner would re-appear on every page. UK PECR permits this without consent because it is strictly necessary for the service you have requested (a working consent control).

Analytics — only after you accept. If you accept the banner, Google Analytics 4 sets its own cookies (_ga, _ga_*) on this domain to identify returning sessions. If you reject or have not chosen, no analytics cookies are set at all because the script is not loaded.

Affiliate click-through cookies — set by the provider. If you click an outbound affiliate link (see the affiliate disclosure), the destination provider may set tracking cookies on their own domain so they can attribute the referral to us. Those cookies are set by the provider, on the provider's site, under the provider's privacy policy — not by us.

Fonts on this site are self-hosted by our hosting provider rather than loaded from Google Fonts servers directly, so visiting a page does not, by itself, send your IP address to Google for font loading.

Manage your analytics consent

Change your mind here. The change applies immediately and persists on this device and browser.

Loading your consent preference…

Sharing your data

We share personal data only with the following parties, and only for the reasons stated:

  • Vercel Inc. — our hosting provider, who acts as a data processor on our behalf in handling server logs.
  • Google LLC (Google Analytics 4) — only if you accept the analytics banner. Google acts as a data processor on our behalf for the analytics data described above.
  • Affiliate providers — only if you choose to click an outbound affiliate link, in which case the destination provider receives whatever information your browser would normally send to them.

We do not sell personal data. We do not share personal data for third-party marketing. We do not transfer your data to law enforcement except where compelled by valid legal process.

International transfers

Because Known by One, LLC is registered in the United States, personal data we hold (for example, an email you send us) is processed in the United States. Vercel and Google (Google Analytics) both operate infrastructure in multiple countries including the United States.

Where personal data is transferred outside the UK, we rely on the UK's adequacy regulations (including the UK extension to the EU–US Data Privacy Framework, which covers Google) and on the contractual safeguards (such as the International Data Transfer Addendum to the EU Standard Contractual Clauses) that our processors put in place.

How long we keep your data

Server logs are retained by Vercel for a short period (Vercel publishes its own retention windows; broadly, a small number of days for raw logs).

Google Analytics is configured at the default 2-month event-level retention. After that, only aggregated reports remain.

Email correspondence is kept for as long as the conversation is useful and then deleted in routine clearouts. We do not keep emails indefinitely.

Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you.
  • Rectify data that is inaccurate or incomplete.
  • Erase data we hold about you (subject to the limited exceptions in UK GDPR).
  • Restrict or object to our processing of your data.
  • Withdraw consent at any time where consent was the legal basis for processing.
  • Data portability in machine-readable form, where applicable.

To exercise any of these rights, email us at contact@thecommitteeroom.org.uk. In practice, given how little we hold, most requests are easy and quick to fulfil.

Complaints

If you think we have mishandled your personal data, please tell us first so we can fix it. You also have the right to complain to the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
ico.org.uk/make-a-complaint

Children

This site is not directed at children under 13 and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will delete it.

Changes to this policy

We will update this policy when our processing changes. Material changes will be noted at the top of the page with a fresh “last updated” date.