Who I Am

This website is operated by Luke John Emmett, sole trader, based in Bath, UK. I am the data controller for any personal data collected through this site. You can contact me at luke@lukejohnemmett.co.uk with any privacy questions.

What Data I Collect and Why

• Contact forms: name, email, message (to respond to enquiries).

• Security logs (Kadence Security Security):
  The IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 60 days.

• Caching (LiteSpeed/QUIC.cloud): temporary cached copies of pages to improve performance.

• Cookies: only essential functional cookies (session, cache, security). I do not use analytics or advertising cookies.

  If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

  KADENCE SECURITY:
  A cookie named “itsec_interstitial_browser” is created to track a user’s login process to implement enhanced security features.

  Visiting the login page sets a temporary cookie that aids compatibility with some alternate login methods. This cookie contains no personal data and expires after 1 hour.

• Embedded content (e.g. YouTube, Vimeo, etc., if used):

  Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

  These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Lawful Basis

Under UK GDPR, I process personal data on the basis of:

• Legitimate interests: responding to enquiries, maintaining site security and performance.

• Consent: only if I add non-essential cookies (such as analytics) in the future.

How Long I Keep Data

• Contact form submissions: normally retained up to 12 months unless part of ongoing correspondence.

• Security logs: 60 days.

• Cache files: temporary and purged regularly.

This site utilises caching in order to facilitate a faster response time and better user experience. Caching potentially stores a duplicate copy of every web page that is on display on this site. All cache files are temporary, and are never accessed by any third party, except as necessary to obtain technical support from the cache plugin vendor. Cache files expire on a schedule set by the site administrator, but may easily be purged by the admin before their natural expiration, if necessary. We may use QUIC.cloud services to process & cache your data temporarily. Please see https://quic.cloud/privacy-policy/ for more details.

Who I Share Data With

• Hosting provider (to operate the site).

• SolidWP (site security, brute force protection, malware scans). When running Security Check, solidwp.com will be contacted as part of a process to determine if the site supports TLS/SSL requests. No personal data is sent to solidwp.com as part of this process. Requests to solidwp.com include the site’s URL. For solidwp.com privacy policy details, please see the Kadence Privacy Policy.

  A QR code image is generated for users that set up two-factor authentication for this site. This image is generated using a Kadence-hosted API. In the process of generating this image, your username is sent to the API. This data is not logged. For privacy policy details, please see the Kadence Privacy Policy.

  This site is scanned for potential malware and vulnerabilities by the Kadence Site Scanner. We do not send personal information to the scanner; however, the scanner could find personal information posted publicly (such as in comments) during the scan.

• QUIC.cloud (LiteSpeed caching).

• I do not sell or share your personal data for marketing purposes.

International Transfers

Some providers (e.g. email or hosting services) may store data outside the UK. Where this occurs, appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

This site is part of a network of sites that protect against distributed brute force attacks. To enable this protection, the IP address of visitors attempting to log into the site is shared with a service provided by solidwp.com. For privacy policy details, please see the Kadence Privacy Policy.

Your Rights

You have the right to:

• Access your data.

• Rectify or erase your data.

• Restrict or object to processing.

• Withdraw consent (where applicable).

• Data portability.

• Complain to the UK Information Commissioner’s Office: www.ico.org.uk.

Automated Decision-Making

I do not use automated decision-making or profiling.

Updates

This policy may be updated from time to time. The current version was last revised on 09.06.2026