Last updated: 24. September 2026.
This Privacy Policy explains how reportwavery.org processes personal data when you visit or contact https://2008.neurogena.net. It is written for readers in Anguilla and for people who access the editorial site from Croatia, other EU or EEA countries, the United Kingdom, and elsewhere. The site is a non-commercial editorial publication about journalistic investigations. It has no user accounts, public comments, newsletter, advertising, trade, or payment functions.
1. Controller and contact details
reportwavery.org is the controller for the personal data described in this notice. This means that it determines why and how that data is processed for operation of the editorial site and for handling messages sent to the editorial platform.
You can contact the controller at [email protected], by telephone on +447766050837, or by post at 15 Attwood Dr, Arborfield, Reading RG2 9FE, Great Britain. Please do not include more personal information in a message than is necessary for your request.
2. Scope of this notice
This notice applies to visitors who read pages on https://2008.neurogena.net, people who use the contact form, and people who otherwise contact the editorial platform using the contact details above. It covers personal data: information that identifies a person directly or that can reasonably be connected with them.
The notice does not replace the privacy information of independent websites that may be mentioned in editorial reporting. This site does not control their practices. The policy also does not create a guarantee that any particular law applies in every location; applicable rights depend on the circumstances of the processing and the person concerned.
3. Personal data collected and its sources
Data is collected directly from you when you submit the contact form. The form requests your name, email address, subject, and message. Any additional information included in your message is supplied by you voluntarily. The editorial platform does not ask contact-form users to provide sensitive personal information, and you should avoid sending it unless it is genuinely necessary for your enquiry.
When a device accesses the site, technical server records may contain the IP address, date and time of the request, requested page or resource, and user-agent information. These records are generated by the device and technical infrastructure as part of delivering and protecting the site. The consent manager records your choice in local storage on your device. The platform does not create accounts or collect account-profile information because accounts are not available.
4. Purposes of processing and legal bases
Personal data is used only for clear, limited purposes. Contact-form information is processed to read, assess, and respond to your message, including follow-up where reasonably necessary. Where the GDPR applies, this processing is normally based on the controller’s legitimate interest in receiving and answering relevant editorial or site-related communications. If a message contains information that requires a different legal basis, it will be handled only where an applicable basis exists.
Technical records are processed to operate the site, diagnose faults, prevent misuse, protect systems, and investigate security incidents. Where the GDPR applies, the basis is the controller’s legitimate interest in maintaining a secure and reliable publication. Processing may also occur where necessary to meet a legal obligation or to establish, exercise, or defend legal claims.
Your consent is used for optional cookies or similar technologies when such technologies are introduced and require consent under applicable law. Consent is not used as a condition for reading editorial content. The site does not use submitted data for advertising, newsletter distribution, profiling, or other direct marketing activity.
5. Whether data must be provided
Browsing the public editorial pages does not require you to provide your name or email address. Technical request information is necessary at a basic level for a web server to receive and respond to a request; blocking all such information may prevent the site from functioning correctly on your device.
If you choose to use the contact form, the requested name, email address, subject, and message are needed to identify the enquiry and send a meaningful reply. You may decide not to provide them, but the controller may then be unable to respond. Providing optional-cookie consent is not required; rejecting optional technologies should not prevent access to the site’s essential content.
6. Cookies, local storage, and similar technologies
The consent manager uses local storage to remember the choice you make about optional cookies. This prevents the same choice prompt from appearing unnecessarily and allows you to change your preference through the site’s consent controls where they are available. You can also remove local-storage data through your browser settings; doing so may cause the consent prompt to appear again.
Necessary technologies may be used where required for basic delivery, security, or the operation of the consent choice itself. Optional cookies or comparable technologies are not to be activated before the required consent has been obtained. You may accept or reject optional cookies, and you may withdraw a previous choice later. For more detail about categories, choices, and browser controls, please read the Cookie Policy.
7. Recipients, processors, and legal disclosures
Access to personal data is limited to people authorised to operate the editorial platform and to technical processors where their involvement is necessary for hosting, infrastructure, security, maintenance, or delivery of communications. Such processors may handle data only on documented instructions and with appropriate confidentiality and security duties, where data-protection law requires this.
Personal data may be disclosed to a public authority, court, regulator, or other recipient when disclosure is required by applicable law, a binding request, or is necessary to protect rights, safety, and system security. Data is not disclosed merely because an external party asks for it. The site does not operate advertising integrations, user accounts, public comments, or payment features described in this policy.
8. International transfers
The controller’s published postal contact is in Great Britain. Depending on the location from which a visitor contacts the site and on the technical infrastructure used at the relevant time, personal data may be accessed or stored outside the visitor’s country or outside the EEA. An international transfer will be assessed under the data-protection rules applicable to that transfer.
Where EU or EEA data is transferred to a country without a currently valid adequacy decision, the controller will use an appropriate transfer mechanism, such as standard contractual clauses, and supplementary safeguards where required by law. The exact safeguard depends on the actual recipient, destination, and transfer route. No transfer mechanism is assumed where no international transfer takes place.
9. Retention criteria
Personal data is not retained indefinitely. Contact-form messages and related correspondence are kept only for as long as reasonably needed to answer the request, manage necessary follow-up, and keep an appropriate record of the communication. They may be retained longer where this is necessary to meet a legal obligation, resolve a dispute, or establish, exercise, or defend legal claims. When those reasons no longer apply, the information is deleted or anonymised where feasible.
Technical server records are retained for the shortest period reasonably needed for security monitoring, fault investigation, and system administration, after which they are deleted, rotated, or anonymised according to the operational configuration. A consent choice stored locally remains on your device until you change the choice, delete the relevant browser data, or the browser removes it under its own settings.
10. Security and data minimisation
The controller seeks to collect only data relevant to the stated purposes and to limit access to those who need it. Reasonable organisational and technical measures are used to reduce the risk of unauthorised access, loss, alteration, or disclosure. These measures are reviewed in light of the nature of the data and the risks involved.
No online system can be made completely risk-free. You can help protect your information by sending only what is necessary, keeping copies of sensitive material off ordinary contact channels where possible, and contacting the controller promptly if you believe that information connected with your enquiry has been compromised.
11. Your data-protection rights
Where the GDPR or comparable applicable law gives you these rights, you may request access to your personal data and information about its processing. You may also request correction of inaccurate data, deletion of data where the legal conditions are met, restriction of processing in relevant circumstances, and receipt of data you provided in a structured, commonly used, machine-readable format where the right to data portability applies.
You may object to processing based on legitimate interests where your particular situation gives grounds for doing so. The controller will stop that processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless processing is needed for legal claims. The site does not carry out direct marketing or profiling. If either activity were introduced, you would have the right to object to it at any time.
To exercise a right, contact [email protected] and describe your request clearly. The controller may ask for information reasonably necessary to confirm identity before disclosing or changing personal data. This protects information against access by an unauthorised person. A request will be handled within the timeframe required by applicable law, and any inability to fulfil it will be explained where the law permits.
12. Consent withdrawal and objections
Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before it was withdrawn. For optional cookies, use the consent controls or remove the relevant local-storage data in your browser. For another consent-based request, contact the controller using the details in this notice.
You may also object to legitimate-interest processing as explained above. A withdrawal or objection may mean that a particular feature cannot continue to operate for you, but it will not prevent you from reading the public editorial content unless the relevant processing is genuinely necessary for technical access or security.
13. Complaints and supervisory authorities
If you are concerned about how your data has been handled, please contact the controller first so that the issue can be examined. You also have the right, where applicable, to lodge a complaint with the competent data-protection supervisory authority in the country of your habitual residence, workplace, or the place of the alleged infringement.
For individuals in Croatia, this may be the Croatian Personal Data Protection Agency (AZOP). Individuals in another EU or EEA country may contact their own competent authority. This right does not limit any other administrative or judicial remedy available under applicable law.
14. Children
The site publishes material for a general readership and is not designed to knowingly collect personal data from children. If a parent, guardian, or child believes that a child has sent personal data through the contact form, they should contact [email protected]. The controller will review the request and take appropriate steps consistent with applicable law.
15. Automated decisions
The controller does not use personal data for automated decision-making, including profiling, that produces legal effects or similarly significant effects for visitors. Editorial content and contact messages are not used to assign automated scores or make decisions about an individual.
16. Changes to this policy
This policy may be updated when the site’s data practices, legal requirements, or security arrangements change. Material changes will be reflected in the published text and the “Last updated” date at the beginning of this page. Please review this page periodically, especially before sending new information through the contact form.