How your data is handled.
DRAFT — not yet legally reviewed. Bracketed [PLACEHOLDERS] must be completed by the owner before this is published (before dev -> main).
This is the same privacy notice that applies across the site, shown here in the teaching chrome. You can change which cookies you allow at any time: .
Who we are
This site is run by Angus Hally, who is the data controller responsible for the personal data described in this policy. If you have a question about your data, or want to make a data-protection request, contact [PRIVACY_CONTACT_EMAIL].
Registered entity: [LEGAL_ENTITY].
What we collect, why, and our lawful basis
We only collect the personal data we need for the purposes below, and for each we rely on a lawful basis under UK GDPR.
We collect:
- Contact form — your name, email address, subject, message, and the source (which persona or page you submitted from). Lawful basis: consent, and our legitimate interest in responding to your enquiry.
- Anti-spam — we use Google reCAPTCHA, which processes your IP address and interaction signals to tell humans from bots. Lawful basis: our legitimate interest in keeping forms secure.
- Analytics — we use PostHog product analytics (usage events) to understand how the site is used. Lawful basis: your consent; no analytics is collected unless you allow it.
- Account / sign-in (if used) — when you sign in we use Supabase authentication to manage your session. Lawful basis: performance of the service you have asked for.
- Preferences — your theme choice and your consent choices are stored locally in your browser so the site remembers them. Lawful basis: our legitimate interest in providing a consistent experience.
How long we keep your data
Contact submissions and the leads created from them are kept for [LEAD_RETENTION_PERIOD], after which they are deleted. We do not keep personal data for longer than we need it.
International transfers
Some of our processors may process your data outside the UK. Where they do, we rely on appropriate safeguards — such as a UK adequacy decision or Standard Contractual Clauses (SCCs) — to protect it. The exact position depends on where analytics is hosted ([POSTHOG_REGION]).
Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected (rectification);
- have your data deleted (erasure);
- restrict how we use your data;
- object to our processing;
- receive your data in a portable format (portability).
To exercise any of these rights, contact [PRIVACY_CONTACT_EMAIL]. Where we rely on your consent, you can withdraw it at any time using the cookie preference centre; withdrawing consent does not affect processing already carried out.
Complaints
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ICO), the UK data-protection regulator, at ico.org.uk. We would appreciate the chance to address your concerns first via [PRIVACY_CONTACT_EMAIL].
Changes to this policy
We may update this policy from time to time. When we make material changes we will update the date below.
Last updated: [DATE_TBD].