Privacy
Privacy Notice
How contact enquiries and Discovery findings sent through Project Clandestinus are handled.
Effective date: 12 July 2026
Controller
Visio Nova Mundi Community Interest Company, company number 16947678, a Community Interest Company and private company limited by guarantee registered in England and Wales, is the controller only for the Project Clandestinus contact-enquiry service. Project Clandestinus otherwise remains independently owned and operated.
Full company information is available on the Company Information page.
Privacy requests: theclandestinus@yahoo.com.
Information and purpose
The form may collect your name, email address, company or organisation, country, enquiry type, message, acknowledgement details and limited technical information needed for abuse prevention and delivery.
We use this information to review, administer and respond to voluntarily submitted general and business enquiries connected with Project Clandestinus. Please do not submit unnecessary sensitive or confidential information.
Lawful basis
We rely on legitimate interests. Someone who voluntarily sends an enquiry reasonably expects it to be reviewed and answered. Processing is limited to the enquiry, related administration, security and necessary legal or dispute handling.
Service providers and international processing
Cloudflare Turnstile processes relevant technical information to help detect and prevent automated abuse. Resend processes and forwards the enquiry to the Project Clandestinus mailbox. Relevant processing may occur outside the UK under the providers’ applicable terms and transfer safeguards.
For further information about the relevant international-transfer safeguards, or to request information about obtaining a copy, contact theclandestinus@yahoo.com.
Storage and retention
The website does not store contact enquiries in an application database or custom submission log, and does not create a custom enquiry-body log. The application does not intentionally retain visitor IP addresses or user-agent values for this workflow.
Providers and the destination mailbox may retain messages under their own settings and policies. Enquiries are retained for 12 months after the latest substantive communication, unless longer retention is necessary for an active relationship, legal obligation or dispute; they should be deleted when that reason ends.
Your rights
Subject to applicable conditions and exemptions, you may request access to, correction of, erasure of, or restriction of processing of your personal information.
Your right to object
Because we rely on legitimate interests, you have the right to object to this processing. To object, emailtheclandestinus@yahoo.com. We will consider your circumstances and stop processing unless there is a compelling legitimate reason to continue or the information is needed for legal claims.
You may complain to the UK Information Commissioner’s Office atico.org.uk/make-a-complaint.
Discovery findings
The separate Discovery findings form at /discovery/submitcollects an optional display name, email address, selected book or area, finding type, finding, optional evidence references, required acknowledgements and correspondence consent.
The Discovery workflow records these details with a generated reference, record status and created and updated timestamps in the Discovery archive for project review and correspondence. Discovery findings are not prize entries and do not create priority, eligibility, ranking or reward entitlement.
The application records only a successful Turnstile verification flag for this workflow; it does not store the security-check token, request IP address or user-agent in the Discovery record. The security check sends the relevant request information to Cloudflare Turnstile for abuse prevention. The application does not intentionally log the submitted finding fields.
Discovery findings are stored in the Discovery archive for project review and correspondence. The controller allocation and retention/deletion arrangements for this separate workflow are currently being finalised and will be stated in this notice before any formal reward programme is activated.
Updates
This notice will be reviewed when the service, providers, retention arrangements or legal requirements materially change.