Last updated: 30 August 2026
1. Who we are
This website, https://www.whoever.bible, is a personal blog concerning the Bible and matters of Christian faith.
For the purposes of applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the person responsible for the processing of personal data through this website is the website owner.
If you have any questions about this Privacy Notice or about how your personal data is handled, please contact us using the contact details provided on this website.
2. What personal data we collect
The personal data we collect depends on how you use the website.
For example, if you leave a comment, we may collect:
- the information you enter into the comment form, such as your name, email address and website address;
- the content of your comment;
- your IP address; and
- information about your browser, including your browser user agent string.
We collect this information primarily to operate the commenting function, moderate comments and help detect and prevent spam and other abusive activity.
An IP address and certain other technical information may constitute personal data where it can be used, directly or indirectly, to identify an individual.
3. Comments
When you leave a comment on the website, the information you provide is processed so that we can display, moderate and manage your comment.
We may use your IP address and browser user agent information to assist with spam detection and website security.
If you provide an email address when commenting, it may be used for purposes connected with managing your comment, including moderation. Your email address will not be publicly displayed as part of your comment.
Where the website uses the Gravatar service, an anonymised string (hash) created from your email address may be provided to Gravatar to determine whether you have a Gravatar profile.
Gravatar is operated by Automattic. You can read Automattic’s privacy information here: https://automattic.com/privacy/
If your comment is approved and you have a Gravatar associated with your email address, your Gravatar profile picture may be displayed publicly alongside your comment.
You should therefore avoid including personal information in a public comment that you do not wish other website visitors to see.
4. Images and media
If you upload an image to the website, you should take care to remove embedded location information (such as EXIF GPS data) if you do not want that information to be made available.
Images published on the website may be accessible to other visitors and may be downloaded. Depending on the image file and the information embedded within it, visitors may be able to extract metadata from a downloaded image.
You should not upload images containing personal information or location information unless you are comfortable with that information being made publicly available.
5. Cookies and similar technologies
This website may use cookies and similar technologies.
Cookies are small files or pieces of information stored on your device when you visit a website. Some cookies are necessary for the website to function properly, while others may be used for additional purposes.
Comment cookies
If you leave a comment, you may be given the option to save your name, email address and website address in cookies on your device. These cookies are intended to make it more convenient for you to leave subsequent comments without having to enter the same information again.
These cookies may remain on your device for up to one year.
Login cookies
If the website provides a login facility, a temporary cookie may be used when you visit the login page to determine whether your browser accepts cookies. This cookie does not contain personal data and is deleted when you close your browser.
When you log in, cookies may also be used to remember your login details and screen display preferences.
Login cookies may remain for up to two days, while screen preference cookies may remain for up to one year. If you select “Remember Me”, your login session may remain active for up to two weeks.
Logging out removes the relevant login cookies.
Editing and publishing cookies
If you edit or publish an article while logged in, an additional cookie may be placed on your device. This cookie does not contain personal data and identifies the article that you have just edited. It expires after one day.
Other cookies
The website may use other cookies or similar technologies where required for security, functionality, website administration or other purposes.
Where cookies or similar technologies are not strictly necessary for the service you have requested, we will obtain consent where required by applicable law before using them.
You can also control or delete cookies through your browser settings.
6. Third-party services and embedded content
Articles on this website may contain content provided by third parties, such as videos, images, articles or other material.
Embedded content from another website may behave in much the same way as if you had visited that third party’s website directly.
The third-party provider may therefore collect information about your visit, use cookies or similar technologies, and monitor your interaction with the embedded content. This may be particularly relevant where you have an account with that third-party service and are logged in.
The third party’s own privacy policy will apply to its processing of your personal data.
Where we use third-party services, we will endeavour to identify them appropriately and provide links to their privacy information where reasonably practicable.
7. Why we use personal data
We process personal data only where there is a lawful basis for doing so under applicable data protection law.
Depending on the circumstances, this may include:
- providing and administering the website;
- publishing and managing comments;
- detecting and preventing spam, abuse and malicious activity;
- maintaining website security;
- responding to communications sent to us;
- complying with legal obligations; and
- protecting our legitimate interests where those interests are not overridden by your rights and freedoms.
Where we rely on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
8. Who we share personal data with
We do not sell your personal data.
Personal data may be disclosed to third-party service providers where this is necessary to operate, secure or maintain the website or to provide a service you have requested.
For example, comments may be checked by an automated spam-detection service.
Where a third-party service processes personal data on our behalf, we will take appropriate steps to ensure that the processing is carried out in accordance with applicable data protection requirements.
Some third-party services may process information outside the United Kingdom. Where this occurs, appropriate safeguards will be used where required by applicable data protection law.
If you request a password reset, your IP address may be included in the password-reset email.
9. How long we keep personal data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless we are required or permitted by law to retain it for longer.
Comments
Comments and their associated metadata may be retained indefinitely. This allows us to recognise and approve subsequent comments automatically rather than placing every follow-up comment into a moderation queue.
We may remove comments or associated personal data where there is a legitimate reason to do so, subject to any legal or security requirements that require us to retain the information.
User accounts
If user accounts are available on the website, we retain the personal information associated with an account for as long as the account remains active, unless a longer retention period is required for legal, administrative or security reasons.
10. User accounts
If you register for an account on this website, the personal information you provide may be stored as part of your user profile.
Depending on the functionality available on the website, you may be able to view, amend or delete information associated with your account. You may not necessarily be able to change your username.
Website administrators may have access to information contained within user accounts where this is necessary to administer, secure or maintain the website.
11. Your rights
Under applicable UK data protection law, you may have rights in relation to your personal data.
Depending on the circumstances, these may include the right to:
- request access to personal data we hold about you;
- request correction of inaccurate or incomplete personal data;
- request erasure of your personal data;
- request restriction of processing;
- object to certain processing;
- request transfer of certain personal data to you or another organisation; and
- withdraw consent where we rely on consent as our lawful basis for processing.
These rights are subject to certain legal conditions and exemptions, so they will not apply in every circumstance.
If you have an account on this website or have submitted comments, you may request a copy of the personal data we hold about you, including information you have provided to us.
You may also request that we erase personal data we hold about you. We may, however, need to retain certain information where we are legally required to do so or where retention is necessary for legitimate administrative, legal or security purposes.
12. How to exercise your rights
To exercise any of your data protection rights, please contact us using the contact details provided on this website.
We may need to ask for information necessary to verify your identity before dealing with a request. This is a security measure intended to prevent personal data from being disclosed to someone who is not entitled to receive it.
We will normally respond to a valid request without undue delay and, in any event, within the period required by applicable data protection law.
13. Security
We take reasonable technical and organisational measures to protect personal data against accidental loss, destruction, misuse, unauthorised access or disclosure.
However, no internet transmission or method of electronic storage can be guaranteed to be completely secure. You should therefore take appropriate care when submitting personal information online.
14. Children’s privacy
This website is not specifically directed at children.
We do not knowingly seek to collect personal data from children. If you believe that a child has provided personal data to us and that it should be removed, please contact us using the details provided on the website.
15. Changes to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes to the website, the services we use, our data-processing activities or applicable legal requirements.
The latest version will be published on this page, together with the date on which it was last updated.
We recommend checking this page periodically for any changes.
16. Complaints
If you have concerns about the way we have handled your personal data, please contact us first so that we have an opportunity to address your concerns.
You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).
You can find information about making a complaint on the ICO’s website: https://ico.org.uk/make-a-complaint
17. Contact
If you have any questions about this Privacy Notice, how your personal data is used, or wish to exercise your data protection rights, please contact the website owner using the contact details provided on https://www.whoever.bible.