Privacy notice
Classic Interior Design Journal collects the minimum personal data required to publish editorial work and respond to reader correspondence. The notice below explains what data the journal collects, why, and the legal basis under the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
Controller
The data controller for Classic Interior Design Journal is the journal's publisher, contactable at [email protected].
What the journal collects
Web-server access logs record IP address, browser user-agent, timestamp, requested URL, and HTTP referrer for every page view, retained for 30 days for security and traffic analysis under legitimate-interest basis (GDPR Art. 6(1)(f)).
The contact form on /contact.html sends submitted name, email address, subject, and message body directly to the editorial inbox via the reader's own email client. Classic Interior Design Journal does not store contact-form submissions in a database.
The article-submission form at /submit/ collects: author name, email, optional site URL, optional biography, article title, abstract, body text, optional file uploads (pdf/docx/odt/rtf/txt/md), and the timestamp of submission. The journal also records a one-way salted hash of the submitter's IP address for rate-limit and abuse-detection purposes; the raw IP is not stored. Lawful basis is contract performance under GDPR Art. 6(1)(b): the data is processed to provide the editorial review the submitter has paid for.
Payment data (card number, CVC, billing address) is collected exclusively by Stripe Inc. on Stripe's hosted Checkout page; the journal never sees, transmits, or stores any cardholder data. Stripe is the merchant of record for the editorial review fee under Pinnacli LLC; Stripe's privacy notice is at stripe.com/privacy.
Newsletter subscription
The footer of every page on classicinterior.design carries a newsletter signup form. Submitting an email address to that form forwards the address (and optional name) to Listmonk, a self-hosted mailing-list manager operated by Pinnacli LLC. Listmonk sends a double-opt-in confirmation email; only after the subscriber clicks the confirmation link is the address added to the active list and used for outbound editorial briefs. Until confirmed, the address is held in an "unconfirmed" state and never receives campaign mail.
Lawful basis is consent under GDPR Article 6(1)(a). Subscribers may unsubscribe at any time using the link in every campaign email; unsubscribe requests are honoured immediately and irrevocably. Outbound campaign mail is sent through Amazon SES under DKIM, SPF, and DMARC alignment on classicinterior.design; bounces and complaints are processed automatically by SES suppression lists.
The journal stores subscriber email, optional name, list-confirmation status, and the timestamp of subscription. The journal does NOT track open rates, click rates, or other behavioural data on outbound campaigns. Subscriber data is retained only while the subscription is active; on unsubscribe, the record is deleted within 30 days.
How long submission data is kept
Declined submissions are retained for 12 months from the date of decision, after which the article body, file uploads, and reviewer notes are deleted. Author name, email, and the Stripe payment-intent ID are retained for 7 years for tax-and-audit purposes (a legal obligation under US and UK accounting requirements; lawful basis GDPR Art. 6(1)(c)). Accepted submissions are retained indefinitely as part of the journal archive once published.
Cookies
The website sets no first-party tracking cookies on its public pages. The article-submission form at /submit/ sets one strictly-necessary session cookie (named PHPSESSID, scoped to /submit/, marked Secure, HttpOnly, SameSite=Lax) for CSRF protection during the submission flow; it is deleted when the browser closes. Where embedded third-party content is used (Google Fonts CSS for typography), the third party may set its own cookies; consult the provider's privacy notice. The site uses no advertising or analytics cookies as of 26 April 2026.
Third parties
Static page assets are served from classicinterior.design. Web typography is loaded from Google Fonts (privacy notice at policies.google.com/privacy). Payment processing is performed by Stripe Inc. on its hosted Checkout pages (privacy notice at stripe.com/privacy); submitters are redirected to Stripe's domain to enter card details. Cloudflare Inc. provides edge caching and DDoS protection for the site (privacy notice at cloudflare.com/privacypolicy). External links in articles are clearly marked and route off the site.
Reader rights
Readers in the European Economic Area, the United Kingdom, and California have the right to access, rectify, and erase personal data, and to lodge a complaint with a supervisory authority. Requests may be sent to [email protected]; the journal responds within 30 days.
Updates
This notice will be republished on this page, with a revised "Last updated" date, whenever its content changes materially.