Legal

Privacy Policy

Last updated: 14 August 2026

1. Who we are

This website, bennyrostron.com, is operated by Benjamin Rostron, a sole trader based in the United Kingdom. Benjamin Rostron is the data controller for personal data collected through this site.

For any privacy-related enquiries, please use the contact form or reach out via LinkedIn.

2. What data we collect

We collect the following categories of personal data:

Contact form submissions: first name, last name, email address, and the content of your message.
Usage data: pages visited, time spent on pages, browser type, device type, and approximate geographic location (country/region level), collected via analytics tools.
Technical data: IP address, browser type and version, operating system, and referring URLs, collected automatically by our hosting infrastructure.

We do not collect sensitive personal data (such as health information, financial data, or government identifiers).

3. How we use your data

We use the data we collect for the following purposes:

To respond to enquiries submitted via the contact form
To understand how visitors use the site and improve its content and performance
To maintain the security and integrity of the website
To comply with legal obligations

4. Legal basis for processing (UK GDPR)

We process your personal data under the following legal bases:

Legitimate interests (Article 6(1)(f)): for analytics and site improvement, where our interest in understanding site usage does not override your rights.
Consent (Article 6(1)(a)): for non-essential cookies and analytics, where you have given explicit consent via our cookie banner.
Contract / pre-contractual steps (Article 6(1)(b)): when you contact us to discuss a potential engagement.

5. Cookies

This site uses cookies. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

We do not sell your personal data. We may share data with the following categories of third parties:

Hosting and infrastructure providers: GoDaddy (site hosting and contact form processing), who process data on our behalf under a data processing agreement.
Analytics providers: where analytics tools are enabled, data may be processed by the relevant provider (e.g. Google Analytics). This is subject to your cookie consent.

All third-party processors are required to handle your data securely and only for the purposes we specify.

7. How long we keep your data

Contact form messages: retained for up to 2 years, or until the purpose for which they were submitted has been fulfilled.
Analytics data: retained in aggregated, anonymised form for up to 26 months.
Server logs: typically retained for up to 90 days for security purposes.

8. Your rights

Under UK GDPR, you have the following rights:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to request correction of inaccurate data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restrict processing: to request that we limit how we use your data.
Right to data portability: to receive your data in a structured, machine-readable format.
Right to object: to object to processing based on legitimate interests.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us via the contact form. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. International data transfers

Some of our third-party service providers are based outside the UK or EEA. Where data is transferred internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

10. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. This includes HTTPS encryption for all data in transit. However, no method of transmission over the internet is completely secure.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the site after changes constitutes acceptance of the updated policy.