Privacy Policy

Last updated: October 2026

This Privacy Policy explains how personal information is handled when you visit cmbasma.com.

The data controller for this website is:

CM BASMA LTD
Address: Starbridge, 320 City Road, London, EC1V 2NZ
Email: celinebooks@hotmail.com

For the purposes of this policy, “we”, “us” and “our” refer to the data controller named above.

Information we collect

This is primarily an informational website. You do not need to create an account, register or provide personal information in order to use it.

We may collect or process limited information in the following circumstances.

When you contact us

If you contact us directly by email, we may receive information such as your name, email address and anything else you choose to include in your message.

We use this information only to respond to your enquiry and for any reasonable follow-up relating to it.

Our lawful basis for doing this is our legitimate interest in responding to correspondence and managing professional enquiries.

The Contact page also contains email links for literary, film, press and media representatives. If you contact one of those representatives directly, they will handle your message independently and their own privacy practices will apply.

Technical and security information

Our hosting, content-delivery and security providers may process limited technical information when you access the website, such as:

IP address;
browser and device information;
requested pages and files;
date and time of requests;
diagnostic, security and error information.

This information is used to operate the website, maintain its security, prevent abuse and diagnose technical problems.

Our lawful basis is our legitimate interest in maintaining a secure and reliable website.

Third-party services

We use third-party companies to help operate, secure and provide content on this website.

These may include:

WP Engine — website hosting;
Cloudflare — DNS, content delivery, performance and security;
LightWidget — to display C.M. Basma’s Instagram content on the website.

These providers may process limited technical information where necessary to provide their services.

We do not sell personal information to advertisers or data brokers.

Instagram feed and LightWidget

Parts of this website display content from C.M. Basma’s Instagram account using LightWidget, a third-party Instagram feed service.

When a LightWidget feed is displayed, LightWidget may receive technical information such as your IP address, browser and device information, referring page, and the date and time of the request.

LightWidget may also record aggregated information about views of and interactions with its widgets.

LightWidget states that its embedded widgets do not set cookies on the devices of visitors who are simply viewing the widget.

Instagram content displayed within the feed originates from Instagram.

If you click through to Instagram, Instagram’s own privacy policy and terms will apply.

Cookies and similar technologies

We do not currently use advertising or behavioural-tracking cookies for public visitors.

We use Independent Analytics, a self-hosted statistics tool, to understand how the website is used. It does not place analytics cookies on your device or send analytics data to an external analytics provider.

Some essential technical functionality provided by our hosting, security or content-delivery services may use cookies or similar technologies where necessary to operate and protect the website.

These technologies are used only where required for functions such as security, reliability or basic website operation.

Third-party websites that you visit by following links from this website may use their own cookies, analytics and tracking technologies. Their own privacy policies apply once you leave this website.

Website statistics

We use Independent Analytics to collect limited statistics about use of the website.

To distinguish visits without setting cookies, the plugin processes a visitor’s IP address and browser information to create a one-way hashed identifier. The raw IP address is not stored by the analytics plugin.

Analytics data, including visited pages, referring sources, approximate location and device information, is stored in this website’s WordPress database and is not sent to an external analytics provider.

We use this information only in aggregate to understand how the website is used and to maintain and improve it. Our lawful basis is our legitimate interest in operating and improving the website.

We do not use this information for behavioural advertising or to create profiles of individual visitors.

International data transfers

Some of our service providers operate internationally and may process information outside the United Kingdom.

Where personal information is transferred internationally, we expect our service providers to use appropriate legal safeguards as required by applicable data-protection law.

External websites and social media

This website contains links to third-party websites and services, including retailers, publishers, ticketing services, Instagram, Substack and other social platforms.

It also uses LightWidget to display selected Instagram content directly on the website.

We do not control these third-party services.

If you follow a link to another website or interact with a third-party service, that provider’s own privacy policy and terms will apply.

A link from this website does not mean that we control or are responsible for the privacy practices of the destination website.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

For example:

ordinary correspondence may be retained while an enquiry remains relevant and for a reasonable period afterwards;
technical and security logs are retained in accordance with our hosting and security providers’ operational policies.

We may retain information for longer where reasonably necessary to meet legal obligations, resolve disputes or protect legal rights.

Your rights

Depending on the circumstances, UK data-protection law gives you rights in relation to your personal information.

These may include the right to:

ask for a copy of personal information held about you;
ask for inaccurate information to be corrected;
ask for information to be deleted in certain circumstances;
ask us to restrict how information is used;
object to certain uses of your information;
withdraw consent where processing is based on consent;
receive certain information in a portable format.

Not every right applies in every circumstance.

To exercise your rights, contact:

[PRIVACY EMAIL]

You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe your personal information has been handled improperly.

ICO website:
https://ico.org.uk/

Security

We take reasonable technical and organisational steps to protect the website and any personal information processed through it.

No internet service can guarantee absolute security, but we use reputable hosting and security providers and take reasonable measures appropriate to the nature of this website.

Changes to this policy

We may update this policy if the website, the services we use or our legal obligations change.

The latest version will always be published on this page with its most recent update date.