Privacy policy
How we collect and use personal data under the UK GDPR and the Data Protection Act 2018.
Template: replace everything in [square brackets] with your details and have this policy checked before going live.
1. Who we are
This website is run by [your name or company name], [address], [email]. We are the data controller for personal data collected through this website.
2. What we collect
- Server logs: IP address, browser and pages visited, kept for security for up to [14] days
- Contact: your name, email and message when you write to us
- Cookies: see our cookie policy
3. Why we use it (lawful basis)
To run and secure the website (legitimate interests), to answer your messages (legitimate interests or steps before a contract) and, only with your consent, for analytics and advertising cookies.
4. Amazon affiliate links
Our site contains links to Amazon.co.uk. When you click one, Amazon may set cookies to record that the visit came from us. Amazon’s privacy notice applies on Amazon’s website.
5. How long we keep data
Only as long as needed for the purposes above, then we delete it.
6. Your rights
Under the UK GDPR you can ask for access, correction, deletion, restriction or a copy of your data, and object to processing. Contact us at [email]. You can also complain to the Information Commissioner’s Office (ico.org.uk).
7. Changes
We may update this policy. The date at the top shows the latest version.