Last updated: 26th January 2025.

1. Introduction

Welcome to joshthompson.co.uk. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you visit our website. It also outlines your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We recognise that privacy is an ongoing responsibility, so we will update this policy from time to time to reflect new legal requirements or changes in our data practices.

If you have any questions about this policy or how we handle your data, please contact us at [email protected].

2. How We Collect and Use Your Personal Data

Information We Collect

When you visit joshthompson.co.uk, we may collect the following types of personal data:

• Directly Provided Information – When you contact us via forms or email, we may collect your name, email address, and any other details you provide.
• Automatically Collected Information – We collect certain technical data through cookies and analytics tools, such as:
  • IP address
  • Browser type and operating system
  • Pages visited and time spent on the website
  • General location (based on IP)

We do not collect sensitive personal data, nor do we knowingly process data from children under the age of 18.

Why We Collect This Data

We use the collected data to:

• Respond to enquiries and provide support.
• Improve website functionality and user experience.
• Analyse visitor behaviour to enhance our services.
• Ensure website security and prevent fraudulent activities.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Legal Basis for Processing Your Data

Under the UK GDPR, we process your personal data based on the following lawful grounds:

• Legitimate Interests – To improve website functionality and analyse usage patterns.
• Consent – When you accept cookies or provide information via contact forms.
• Legal Obligations – To comply with legal requirements or law enforcement requests.

4. Cookies & Tracking Technologies

What Are Cookies?

Cookies are small text files placed on your device to improve website functionality and performance.

Types of Cookies We Use

• Essential Cookies – Necessary for the website to function correctly.
• Analytics Cookies – Help us understand visitor behaviour and improve user experience (e.g., Google Analytics).
• Preference Cookies – Store your settings and preferences.

Managing Cookies

You can accept or reject cookies via our cookie consent banner. You can also adjust your browser settings to delete or block cookies. However, disabling essential cookies may affect website performance.

5. Sharing Your Personal Data with Third Parties

We only share your personal data with:

• Cloud storage and analytics providers – To securely store and analyse data.
• Service providers – If required to operate our website (e.g., hosting providers).
• Legal authorities – If required by law, subpoena, or court order.

We do not disclose your data to third parties for their independent marketing purposes.

6. Data Security

We take appropriate security measures to protect your data, including:

• Encryption – Data is encrypted both in transit and at rest.
• Access Control – Restricted access to authorised personnel only.
• Regular Monitoring – To detect and prevent security threats.

Despite our security measures, no online platform can guarantee 100% protection. If you believe your data has been compromised, please contact us immediately at [email protected].

7. Your Rights Under UK GDPR

Under data protection laws, you have the right to:

• Access – Request a copy of the personal data we hold about you.
• Correction – Ask us to correct inaccurate or incomplete data.
• Deletion (“Right to be Forgotten”) – Request that we erase your personal data, subject to legal exceptions.
• Restriction – Ask us to limit processing of your data in certain circumstances.
• Objection – Object to data processing based on legitimate interests.
• Data Portability – Request your data in a structured, commonly used format.
• Withdraw Consent – If processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month, as required by law.

If you are unhappy with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) via https://ico.org.uk/.

8. Data Storage & Retention

We retain personal data only as long as necessary for the purposes outlined in this policy, or as required by law. When data is no longer needed, we securely delete or anonymise it.

If you wish to request deletion of your data, please contact us at [email protected].

9. Third-Party Links & External Services

Our website may contain links to third-party services, such as social media platforms. If you choose to interact with these services, be aware that their privacy policies may differ from ours. We encourage you to review their policies separately.

10. International Data Transfers

We primarily process and store data within the United Kingdom. However, some third-party providers may operate outside the UK or the European Economic Area (EEA). When data is transferred internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the UK Government.
• UK GDPR-approved data protection mechanisms.

By using our website, you acknowledge that your data may be processed outside your home country under these safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be notified via the website or by email (if applicable).

12. Contacting Us About Data Protection

If you have any questions about this policy or wish to exercise your rights, please contact us at:

📧 [email protected]

If you are dissatisfied with our handling of your data, you can also contact the Information Commissioner’s Office (ICO) at https://ico.org.uk/.