Privacy Policy
This policy explains what personal data Malton London Press collects through this website and in its publishing work, why we use it, who helps us process it and the choices you have.
Who we are
Malton London Press is the controller of the personal data described here. You can contact us about privacy at info@maltonlondonpress.com or by post at 167–169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom.
What we collect and why
Newsletter
If you subscribe, we collect your email address, which of our sign-up forms you used and the dates on which you subscribed, confirmed or unsubscribed. We first send you a confirmation link and add you to the mailing list only after you click it. We use your address to send news about our publications, open access work and calls for proposals. Our legal basis is your consent, which you can withdraw at any time with the unsubscribe link in every email or on our unsubscribe page.
Our newsletter service records whether emails are delivered and opened and which links are clicked, so that we can see which news interests readers. Turning off images in your email program prevents the record of opening.
Book proposals
When you submit a proposal, we collect your name, email address and, if you give it, your affiliation, together with the proposal itself: title, overview, table of contents, word count, timeline, licence preference and your declarations. We use this to assess the proposal, to correspond with you about it and, if it is accepted, to prepare a publishing agreement. Our legal basis is that you have asked us to consider your work with a view to an agreement, together with our legitimate interest in keeping a record of editorial decisions.
Published works
Publication pages and the metadata we register show the names, affiliations and ORCID iDs of authors and editors, as agreed for each publication. We send this metadata to Crossref when we register DOIs, and indexing services such as Google Scholar can read it. Our legal basis is the publishing agreement and our legitimate interest in maintaining an accurate scholarly record.
Correspondence
If you email us or message us on WhatsApp, we use what you send to reply and keep the exchange as a record. Our legal basis is our legitimate interest in answering enquiries, or the publishing agreement where one applies. WhatsApp messages are also processed by WhatsApp under its own terms.
Visits to this website
Our web server records the IP address, browser type, page requested and time of each request. We use these logs only to keep the site secure and to fix faults, and keep them for no longer than 30 days. IP addresses are also held in the server’s memory, and never written to disk, to limit repeated form submissions.
We count visits with Cloudflare Web Analytics. It sets no cookies, stores nothing in your browser and does not build a profile of you. It records the page address, the site that referred you, your browser, operating system and type of device, your country (worked out from your IP address, which the analytics service does not keep) and how quickly the page loaded. We see only totals, such as how many people read a page or which countries our readers come from, and use them to understand our readership and improve the site. UK law allows statistics of this kind without consent, provided we tell you about them and you can object. Our legal basis is our legitimate interest in understanding how the site is used.
You can turn analytics off for this browser below. If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as an objection and do not load analytics.
Cookies
This website does not set cookies. It stores one setting in your browser to remember whether you have dismissed our analytics notice or turned analytics off. The content management system used by our staff sets a login cookie for them only.
Who processes data for us
We use these service providers, which process personal data on our instructions:
- Hetzner Online (Germany) hosts the website.
- Supabase stores newsletter and proposal records in a database in Frankfurt, Germany.
- Cloudflare stores the files we publish and provides website analytics.
- Brevo (France) sends confirmation emails and newsletters and holds the mailing list.
- Hostinger provides our domain names and mailboxes.
- Google provides the mailbox that receives notifications of new proposals.
We do not sell personal data or use it for advertising. We disclose personal data to others only where the law requires it.
International transfers
We keep personal data in the United Kingdom and the European Economic Area wherever we can. Cloudflare and Google are based in the United States. Where personal data goes there, it is protected by the UK–US data bridge or by contractual safeguards recognised under UK law.
How long we keep it
- Newsletter: while you are subscribed. After you unsubscribe we keep your email address and the date so that we respect your choice; ask us if you want it deleted entirely. Sign-ups that are never confirmed are deleted within 12 months.
- Proposals we do not publish: three years after our decision, then deleted.
- Published works: the proposal, agreement and correspondence for as long as the work is published, and contract and payment records for six years after the agreement ends.
- Correspondence: three years after our last exchange, unless it belongs to a publication record.
- Server logs: no longer than 30 days.
Your rights
You can ask for a copy of your personal data, have it corrected or deleted, restrict or object to how we use it, receive it in a portable form and withdraw consent at any time. Write to info@maltonlondonpress.com; we reply within one month. Some rights have limits, for example where we must keep records by law or to preserve the published scholarly record.
If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Children
Our services are intended for researchers, students and professionals. We do not knowingly collect personal data from children under 13.
Changes to this policy
We update this policy when our practices change. The version on this page is the current one.