Privacy Policy
Last updated: 20 July 2026
1. Who we are
N17 Notebook (we, us, our) is an independent fan publication covering Tottenham Hotspur Football Club. It is not affiliated with, endorsed by, or connected to Tottenham Hotspur Football Club or any of its subsidiaries.
The data controller responsible for your personal data is:
[Your Name / Organisation Name]
[Your address]
Email: contact@n17notebook.com
If you are in the European Union, this policy is governed by the EU General Data Protection Regulation (GDPR). If you are in the United Kingdom, it is governed by the UK GDPR and the Data Protection Act 2018.
2. What data we collect and why
2.1 Data you provide directly
N17 Notebook does not currently ask you to create an account, submit forms, or provide personal information. If contact functionality is added in future, this policy will be updated before it goes live.
2.2 Cookie and storage preferences
When you respond to the cookie consent banner, we store your preferences in your browser's localStorage. This record contains:
- Your choices for each cookie category (Essential, Analytics, Advertising)
- The date and time you made those choices (ISO 8601 timestamp)
- A version number identifying the version of this policy in force at the time
This record is stored on your device only. It is not transmitted to our servers. Legal basis: legitimate interests (maintaining a record of consent is a requirement of GDPR Article 7(1)).
2.3 Analytics data (if you consent)
If you enable Analytics cookies, we use Vercel Web Analytics to collect anonymised data about how you use the site — pages visited, time spent, referral source, and browser/device type. Vercel processes this data on our behalf as a processor. This data is used solely to improve the site and its content. No personal profiles are built. No data is sold.
Legal basis: consent (GDPR Article 6(1)(a)).
You can withdraw consent at any time via the cookie preferences link in the footer.
2.4 Advertising data (if you consent)
If you enable Advertising cookies, third-party advertising partners may set cookies to serve and measure advertisements. These partners may process your data as independent data controllers under their own privacy policies, which we will link to when advertising is enabled.
Legal basis: consent (GDPR Article 6(1)(a)).
Advertising functionality is not currently active. This section will be updated with named partners and their policies before any advertising cookies are set.
2.5 Server logs
Our hosting provider automatically records standard web server logs: IP address, browser type, pages requested, and timestamps. These are used for security, uptime monitoring, and abuse prevention. They are retained for a maximum of 30 days and are not used to identify individual visitors.
Legal basis: legitimate interests (GDPR Article 6(1)(f)) — maintaining the security and integrity of the service.
3. Cookies and local storage
A cookie is a small text file stored on your device by a website. We also uselocalStorage, a browser storage mechanism that works similarly but is not transmitted with each request. Both are covered by the UK/EU ePrivacy Directive and require your consent where not strictly necessary.
| Name | Type | Purpose | Consent needed? |
|---|---|---|---|
| n17_cookie_consent | localStorage | Stores your cookie preference record | No — essential |
| Analytics cookies | Cookie | Site usage analytics | Yes — Analytics |
| Advertising cookies | Cookie | Ad serving and measurement | Yes — Advertising |
You can manage or withdraw your consent at any time using the link in the page footer, or by clearing your browser's site data.
4. How we share your data
We do not sell, rent, or share your personal data with third parties for their own marketing purposes.
Data may be shared with:
- Hosting and infrastructure providers — who process server log data on our behalf under data processing agreements.
- Analytics providers (if you consent) — processing anonymised usage data. Named when analytics is activated.
- Advertising partners (if you consent) — processing data for ad serving. Named when advertising is activated.
- Legal authorities — where we are required to do so by law.
5. International transfers
If data is transferred outside the UK or European Economic Area (EEA), we will ensure appropriate safeguards are in place — such as Standard Contractual Clauses or an adequacy decision — before any such transfer occurs. Where analytics or advertising services involve international transfers, we will document those safeguards in this section when those services are activated.
6. How long we keep your data
- Consent preferences — retained in your browser until you clear site data or withdraw consent. Automatically treated as expired if the policy version changes.
- Server logs — maximum 30 days, then deleted.
- Analytics data — retention period will be specified when analytics is activated, and will not exceed what is necessary for the stated purpose.
7. Your rights
Under UK GDPR and EU GDPR, you have the following rights regarding your personal data:
- Right of access — to request a copy of the personal data we hold about you.
- Right to rectification — to ask us to correct inaccurate data.
- Right to erasure — to ask us to delete your data where there is no longer a lawful basis for processing it.
- Right to restrict processing — to ask us to limit how we use your data in certain circumstances.
- Right to data portability — to receive your data in a machine-readable format where processing is based on consent or contract.
- Right to object — to object to processing based on legitimate interests.
- Right to withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal. Use the Cookie preferences link in the footer.
To exercise any of these rights, contact us at contact@n17notebook.com. We will respond within one month.
You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO). In the EU, contact your national data protection authority.
8. Children's data
This site is not directed at children under the age of 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy when we add new functionality (such as analytics or advertising), when legal requirements change, or for other operational reasons. Material changes — particularly those that affect how we process data or extend our use of cookies — will be signalled by incrementing the policy version in the consent record, which will prompt returning visitors to review and re-confirm their preferences.
The "Last updated" date at the top of this page reflects the most recent revision.
10. Contact
For any privacy-related queries, requests, or complaints, contact the data controller:
[Your Name / Organisation Name]