Privacy Policy

Who we are

This policy sets out, in plain terms, how Kingdom of Dream (kingdomofdream.com) handles personal data. The site is published by Indixital Media, C-56/11, Sector 62, Noida, Uttar Pradesh 201301, India, which is the data controller for the purposes of the UK and EU General Data Protection Regulation.

Data protection enquiries: privacy@kingdomofdream.com, or by post to the address above marked "Data Protection".

The short version

What we collect, and why

• Server logs. Our hosting provider records the IP address, timestamp, requested URL, referring page, user-agent string and response status for every request. This is standard for all web hosting and is needed to serve the site, diagnose faults and detect abuse. Lawful basis: legitimate interests (operating and securing the site).
• Analytics. Aggregate measurement of which pages are read, for how long, on what kind of device and from which country, so we know what to write more of. Lawful basis: consent, where analytics cookies are used.
• Advertising. Third-party ad networks may set cookies or similar identifiers to select ads, cap how often you see the same one, and measure whether an ad was viewed. Lawful basis: consent.
• Contact form and email. If you write to us, we hold your message, your email address and anything else you choose to put in it — for as long as it takes to deal with the enquiry and a reasonable period afterwards. Lawful basis: legitimate interests (responding to correspondence).
• Consent record. Your cookie choice is stored in your own browser's local storage so we do not ask again on every page. It never leaves your device.

We do not collect special category data. We do not ask for date of birth, health information, financial details or government identifiers, and you should not send them to us.

Cookies and similar technologies

Cookies fall into three groups on this site.

• Strictly necessary. Remembering your consent choice, and any security or load-balancing tokens set by the host. These are set without consent because the site cannot function correctly without them.
• Analytics. Set only after you accept. Used in aggregate; we do not attempt to identify individual readers from them.
• Advertising. Set only after you accept. These are the ones that can be used to build an interest profile across sites, and they are the reason the consent banner exists.

You can change or withdraw your choice at any time using Cookie settings in the footer, and you can block or delete cookies entirely in your browser. Blocking advertising cookies does not remove the ads; it makes them less relevant and, since advertising funds this site, less valuable to us.

Third parties we share data with

We do not sell personal data. Data reaches the following categories of recipient in the ordinary course of running the site:

• Hosting provider. Serves every page and holds the server logs described above.
• Content recommendation and advertising networks. Once you consent, these load in your browser and receive your IP address, user-agent, the page you are on and any identifiers they have previously set. They act as independent controllers for that processing and their own policies govern it.
• Analytics provider. Receives aggregate usage data, subject to consent.
• Image CDN. Photographs are served from Pexels' content delivery network, which receives the request's IP address and user-agent as a technical necessity of delivering the image.
• Email provider. Handles messages you send us.

Where an ad network operates under the IAB Transparency and Consent Framework, your choices are passed to it in the standard consent string. We do not control what any third party does with data once it has been lawfully collected under its own policy, and we would encourage you to read those policies if that concerns you.

International transfers

Indixital Media is based in India. Our hosting and the third parties listed above operate globally, so personal data may be processed outside your own country, including in jurisdictions whose data protection law differs from yours. Where data covered by UK or EU GDPR is transferred outside those areas, transfers rely on adequacy decisions or on Standard Contractual Clauses as appropriate.

How long we keep things

• Server logs: typically 30 to 90 days, as set by our hosting provider's retention.
• Aggregate analytics: up to 24 months, after which it is retained only in a form that cannot identify anyone.
• Correspondence: for the life of the enquiry and up to 24 months afterwards, then deleted.
• Advertising identifiers: governed by the network that set them, usually 13 months or less in the EEA and UK.

Your rights

Depending on where you live, you have some or all of the following rights over personal data we hold about you:

• Access — a copy of it.
• Rectification — correction of anything inaccurate.
• Erasure — deletion, where we have no overriding reason to keep it.
• Restriction and objection — including an absolute right to object to direct marketing.
• Portability — a machine-readable copy of data you provided to us.
• Withdrawal of consent — at any time, without affecting processing already carried out.

If you are in California: the CCPA as amended by the CPRA gives you the right to know what is collected and disclosed, to delete it, to correct it, to limit use of sensitive information, and to opt out of "sale" or "sharing" — a definition broad enough to include some targeted-advertising cookies. Opting out of advertising cookies through the consent banner exercises that right for this site. We will not discriminate against you for exercising it.

To make a request, email privacy@kingdomofdream.com. We reply within 3 working days and resolve within one month, and we may need to ask a question or two to be confident we are not disclosing your data to somebody else. If you are unhappy with the outcome you can complain to your national data protection authority.

Children

This site is written for adults and is not directed at children under 13 (or under 16 in jurisdictions that set the higher age). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, write to privacy@kingdomofdream.com and we will delete it.

Security

The site is served over HTTPS. Access to the small amount of data we hold is limited to people who need it. No system is perfectly secure and we do not claim otherwise; what we can say is that we deliberately collect very little, which is the most reliable protection available.

Do Not Track and global signals

There is still no agreed standard for how sites should respond to the browser Do Not Track header, and we do not act on it. We do honour the Global Privacy Control signal where your browser sends one, treating it as an opt-out of advertising cookies.

Changes to this policy

If this policy changes materially we will update the date at the top and, where the change affects how your data is used, ask for consent again. Continuing to use the site after a change means the current version applies.