Privacy Policy (GDPR)

Who we are

This website is davelayland.co.uk, operated by Dave Layland (“we”, “us”). This policy explains what personal data we collect, why, and what rights you have over it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What personal data we collect

Contact form submissions. When you use the contact form on this site (powered by Contact Form 7), we collect the name, email address, and message content you provide, in order to respond to your enquiry.

Comments. If you leave a comment on this site, we collect the comment content plus your name, email address, and IP address, to help detect spam and to display your comment. Comments and their metadata may be retained indefinitely so we can recognise and approve follow-up comments automatically, rather than holding them for moderation.

Cookies and site analytics. Like most websites, this site uses cookies and similar technologies for basic functionality, and (where enabled) analytics via Google Site Kit / Google Analytics, and Jetpack Stats, to understand how visitors use the site. These tools may collect your IP address, browser and device information, pages visited, and time spent on the site.

Anti-spam checks. Comments and form submissions on this site are checked by Akismet, an automated anti-spam service. Akismet processes the content submitted, along with the sender’s IP address, user agent, and referrer, to determine whether it is spam.

Embedded content from other websites

Pages on this site may include embedded content (for example, Instagram posts or images). Embedded content from other websites behaves in the exact same way as if you had visited that other website directly. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.

Legal basis for processing

We process your personal data on the following legal bases: (a) consent — for non-essential cookies and analytics, where required; (b) legitimate interests — to respond to enquiries, maintain site security, and understand site usage; and (c) legal obligation, where applicable.

Who we share your data with

This site is hosted on WordPress.com and uses the Jetpack plugin, both operated by Automattic Inc. Contact form submissions are processed by Contact Form 7. Comment and form spam checking is handled by Akismet (also operated by Automattic). Site analytics may be processed by Google, via Google Site Kit. Each of these providers processes data on our behalf and may store data outside the UK/EEA, under their own data processing and transfer safeguards.

How long we retain your data

Contact form enquiries are retained only as long as needed to respond to and resolve your enquiry, and are deleted thereafter unless you become an ongoing client, in which case standard business record-keeping periods apply. Comments and their metadata are retained indefinitely, as described above.

Your rights

Under UK GDPR, you have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate personal data
  • Request erasure of your personal data
  • Object to or restrict how we process your personal data
  • Request a portable copy of your personal data
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk if you believe your data has been mishandled.

Contact us

If you have any questions about this privacy policy or how your data is handled, please contact us via the contact form on this site.

Scroll to Top