Security and privacy

A plain-English summary of how The EVC Magazine app and website look after your information. This is practical information, not legal advice. Our full privacy policy sits on the EVOLVE Advice website.

What we keep

• When you sign up: your name, email address, school or organisation, job role, and whether you ticked the box to receive emails.
• If you turn on notifications: a notification address for your device.
• A count of when each advert is seen or tapped. We record this once per reader per day, so it is not double counted.
• A short activity log of sign ups, sign ins and admin changes, which we delete after 90 days.
• The website itself sets no cookies and does not track you. Features, school stories and news can be read without signing in.

How it is protected

• You sign in with a six digit code sent to your email. Codes are stored scrambled (hashed), expire after 10 minutes and stop working after 5 wrong tries. We limit how many codes can be requested.
• Only named administrators can use the admin area, and their changes are logged.
• Everything travels over an encrypted (https) connection, and the app and website send standard browser security headers.
• Old sign in codes, rate limit records, advert counters and activity logs are cleared automatically.

Your choices

• You can delete your account yourself in the app, under your profile. That removes your details, notifications and advert records.
• You can untick email updates, or unsubscribe from any email we send.

Who handles data for us

• Cloudflare hosts the app and website, the database and the images.
• Resend sends our sign in and edition emails.
• Jotform collects print and digital subscription requests on the Subscribe page.
• Your device's push service (Apple, Google or your browser) delivers notifications if you switch them on.

The EVC Magazine is produced by EVOLVE Advice and published by Elfandor Ltd. Questions: marketing@evolveadvice.co.uk.