Who I Am

This website is operated by Luke John Emmett, sole trader, based in Bath, UK. I am the data controller for any personal data collected through this site. You can contact me at luke@lukejohnemmett.co.uk with any privacy questions.

 

What Data I Collect and Why

  • Contact forms: name, email, message (to respond to enquiries).

  • Security logs (SolidWP Security): IP addresses and login attempts (to protect the site). Retained 60 days.

  • Caching (LiteSpeed/QUIC.cloud): temporary cached copies of pages to improve performance.

  • Cookies: only essential functional cookies (session, cache, security). I do not use analytics or advertising cookies.

  • Embedded content (e.g. YouTube, Vimeo, etc., if used): these providers may collect data as if you visited their site directly.

Lawful Basis

Under UK GDPR, I process personal data on the basis of:

  • Legitimate interests: responding to enquiries, maintaining site security and performance.

  • Consent: only if I add non-essential cookies (such as analytics) in the future.

How Long I Keep Data

  • Contact form submissions: normally retained up to 12 months unless part of ongoing correspondence.

  • Security logs: 60 days.

  • Cache files: temporary and purged regularly.

Who I Share Data With

  • Hosting provider (to operate the site).

  • SolidWP (site security, brute force protection, malware scans).

  • QUIC.cloud (LiteSpeed caching).

  • I do not sell or share your personal data for marketing purposes.

International Transfers

Some providers (e.g. email or hosting services) may store data outside the UK. Where this occurs, appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Your Rights

You have the right to:

  • Access your data.

  • Rectify or erase your data.

  • Restrict or object to processing.

  • Withdraw consent (where applicable).

  • Data portability.

  • Complain to the UK Information Commissioner’s Office: www.ico.org.uk.

Automated Decision-Making

I do not use automated decision-making or profiling.

Updates

This policy may be updated from time to time. The current version was last revised on 04.09.2025