Privacy policy

Last updated: April 2026

Who we are

We are the operator of this website (“we”, “us”, “our”). We are the data controller responsible for the personal data collected through this site. If you have questions about how we handle your data, please see How to contact us section below.

This policy applies to visitors and users of this website. It has been written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and, where applicable, the EU General Data Protection Regulation (EU GDPR 2016/679).

What data we collect and why

We collect only the personal data necessary to operate this website effectively. In practice, this means:

  • Usage data — collected automatically via Google Analytics when you visit any page (see Google Analytics section)
  • Contact data — your name and email address, submitted voluntarily when you use our contact form (see How to contact us section).

We do not collect sensitive personal data such as health information, financial details, or data relating to children.

Google Analytics

We use Google Analytics to help us understand how visitors use this website. This service collects data such as:

  • Pages visited and time spent on each page
  • Referring websites and search terms
  • Approximate geographic location (country/region level)
  • Browser type, device type, and operating system

Google Analytics uses cookies and similar tracking technologies to identify repeat visitors. The data collected is aggregated and anonymised where possible; we do not use it to identify you personally.

Google acts as a data processor on our behalf under a data processing agreement. Google may process data in the United States; we rely on Google’s Standard Contractual Clauses as the transfer mechanism for UK and EU purposes.

You can opt out of Google Analytics tracking at any time by installing the Google Analytics opt-out browser add-on. You can also manage cookies via your browser settings or our cookie banner.

For more information on how Google uses data, see Google’s Privacy Policy.

Our lawful basis for using Google Analytics is legitimate interests (UK GDPR Article 6(1)(f)) — specifically, understanding website performance so we can improve our content and user experience. Where required, we obtain your consent via a cookie banner before setting any non-essential cookies.

Contact form

When you submit our contact form, we collect your email address and any information you choose to include in your message. We use this data solely to:

  • Respond to your enquiry
  • Follow up where necessary to address your query

We will not use your email address to send you marketing communications unless you explicitly ask us to do so and we have obtained your separate consent.

Our lawful basis for processing contact form data is legitimate interests (UK GDPR Article 6(1)(f)) — responding to communications directed to us — or, where relevant, contractual necessity (Article 6(1)(b)).

Legal bases for processing

Under UK GDPR, we rely on the following lawful bases:

  • Legitimate interests (Article 6(1)(f)) — for website analytics and responding to contact enquiries, where our interests do not override your rights and freedoms.
  • Consent (Article 6(1)(a)) — for any non-essential cookies. You may withdraw consent at any time via your browser settings or our cookie preferences tool.
  • Legal obligation (Article 6(1)(c)) — where we are required to disclose data by law.

How long we keep your data

We retain your personal data only for as long as necessary:

  • Google Analytics data — retained for 26 months within Google’s systems, then automatically deleted.
  • Contact form submissions — retained for up to 2 years from the date of your last correspondence with us, after which records are securely deleted.

Who we share your data with

We do not sell, rent, or trade your personal data to any third party.

We share data only with:

  • Google LLC — as our analytics provider, acting as a data processor under contract.
  • Competent authorities — where we are legally required to disclose information (e.g., in response to a court order, law enforcement request, or regulatory obligation).

In any other circumstance, we will not disclose your personal data without your explicit consent.

Transfers outside the UK / EEA

Google Analytics may transfer data to servers in the United States. We rely on the appropriate safeguards in place — including Google’s Standard Contractual Clauses approved under UK GDPR and the EU GDPR — to protect your data during any international transfer.

For more on international transfers under UK GDPR, see the ICO’s guidance on international transfers.

Your rights

Under UK GDPR (and EU GDPR where applicable), you have the following rights regarding your personal data:

  • Access – Request a copy of the data we hold about you.
  • Rectification – Ask us to correct inaccurate or incomplete data.
  • Erasure – Request deletion of your data (“right to be forgotten”).
  • Restriction – Ask us to limit how we use your data in certain circumstances.
  • Portability – Receive your data in a portable, machine-readable format.
  • Objection – Object to processing based on legitimate interests.
  • Withdraw consent – Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, please contact us using the details in <a href=”#s12″>section 12</a>. We will respond within one month as required by law.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the relevant supervisory authority:

Cookies

We use the following categories of cookies:

  • Strictly necessary cookies — essential for the website to function. These do not require your consent.
  • Analytics cookies — set by Google Analytics to collect usage statistics. These are only placed with your consent.

You can control cookies through your browser settings. Guidance on managing cookies is available from:

Note that disabling analytics cookies will not affect your ability to use this website.

Changes to this policy

We may update this privacy policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Where changes are significant, we will endeavour to notify users clearly (for example, via a banner on the website). We encourage you to review this policy periodically.

How to contact us

For any questions, requests, or complaints relating to this privacy policy or your personal data, please contact us via the contact form on this website. We will aim to respond within five working days.