Privacy Policy

Effective Date: 24 August 2026

Alchemybluemoon (‘we’, ‘us’, or ‘our’) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information in compliance with the UK GDPR, the Data Protection Act 2018, and the Data Use and Access Act 2025.

1. Information Collection and Use

We collect personal information only when necessary to provide our research and archival services.

  • What we collect: This may include your name and email address (e.g. via contact forms).
  • Special Category Data: Our services explore philosophical and spiritual themes. However, we do not require you to provide ‘Special Category Data’ (information revealing religious beliefs, health data, or philosophical affiliations) to use this website. Any such information shared via contact forms is provided at your own discretion.
  • Purpose: We use this data to respond to enquiries and improve our website.
  • Legal Basis: We process data based on Legitimate Interests (for responding to enquiries and website security).

2. Log Data & Server Analytics

Whenever you visit Alchemybluemoon, your browser automatically sends ‘Log Data’ to our hosting server. This includes your anonymised IP address, browser type, pages visited, and the time spent on the site.

We use this server-side traffic data via DreamHost solely to monitor site performance, security, and basic visitor counts. This method does not use tracking cookies or identify individual users. Under the DUAA 2025, some of this ‘low-risk’ processing is permitted to ensure the website functions efficiently and safely.

3. Cookies and Scripts

  • Cookies: We do not use any analytical, tracking, or marketing cookies. We only use essential, functional cookies if they are strictly necessary for the technical operation of the website.
  • Scripts: Code used to make the site interactive and function safely. If you wish to object to this minimal, low-risk server monitoring, you may do so easily by enabling a standard ‘Do Not Track’ (DNT) or Global Privacy Control (GPC) setting in your browser, which our hosting server respects automatically.

4. Third-Party Service Providers

We use trusted third-party providers to help run our website. These providers only have access to your data to perform specific tasks on our behalf:

  • Hosting, Logs & Security: DreamHost, Malcare WordPress.
  • Content: Enfold.

Note: Some providers are based in the United States. We ensure these transfers are protected by Standard Contractual Clauses (SCCs) or the UK-US Data Bridge.

5. Embedded Content and External Links

Articles on this site may include embedded content (e.g. videos). This content behaves as if you visited the external website directly. These sites may collect data about you and use their own tracking cookies. We are not responsible for the privacy practices of external sites.

6. Data Security and Retention

Your Personally Identifiable Information is stored securely and is only accessible to authorised personnel.

  • Security: We use industry-standard encryption and security plugins to protect against unauthorised access.
  • Breach Protocol: In the unlikely event of a data breach that poses a risk to your rights, we commit to notifying the Information Commissioner’s Office (ICO) and affected individuals within 72 hours of discovery.
  • Retention: We only keep your data for as long as necessary to fulfil the purpose for which it was collected (e.g. to resolve your specific enquiry).

7. Your Data Rights

Under UK law, you have the following rights regarding your data:

  • The Right to Access: You can request a copy of the data we hold about you.
  • The Right to Rectification: You can request that we correct inaccurate information.
  • The Right to Erasure (‘Right to be Forgotten’): You can ask us to delete your data.
  • The Right to Data Portability: The right to receive your data in a structured, machine-readable format.
  • The Right to Restrict Processing: The right to ask us to ‘pause’ the use of your data.
  • The Right to Object: You have the specific right to object to our processing of your data, even where we rely on Legitimate Interests.

To exercise these rights, please contact us using the details below.

8. Formal Complaints Procedure

In accordance with the Data Use and Access Act 2025, if you have a concern about our data practices, please follow this procedure:

  1. Lodge a Complaint: Contact us directly via the website. We will acknowledge your complaint within 30 days.
  2. Internal Review: We will provide a formal response without undue delay.
  3. Escalation: If you remain dissatisfied, you may then escalate your concern to the Information Commissioner’s Office (ICO).

9. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in law or technology. We will notify you of any significant changes by posting the new policy on this page.

10. Contact Us

For questions regarding this policy or our data practices, please contact us:

  • Website Name: Alchemybluemoon
  • Curator: Lon Teija, M.A.
  • Professional Credentials: UKCP Registered Psychotherapist
  • Secure Gateway: Contact 
UKCP and PSA Accredited Register.

Clinical Disclaimer: This archive is intended for research and spiritual exploration only. It does not provide therapeutic services, and engaging with this material does not establish a client-therapist relationship. If you are in crisis or need immediate support, please contact emergency services or NHS 111.