Privacy policy

Last updated: 3 November 2026

The short version

When you email me, I collect just enough detail to reply to you, and nothing else. I do not sell it, share it with advertisers, build profiles from it, or use it to market to you. That is the whole point of a small independent practice.

This policy explains what the glenlock.co.uk website collects, why it is collected, how long it is kept, and the rights you have under UK data protection law. It applies only to this website; it does not cover any other organisation you may contact.

1. Who is responsible for your information

The data controller for this website is Glenlock Ltd, a limited company registered in the United Kingdom, operating as Glenlock Digital. I am the sole director of the company and take full responsibility for its compliance with UK GDPR, the Data Protection Act 2018, and its obligations to the Information Commissioner’s Office (ICO). I am the person who reads your enquiry, the person who does the work, and the person you write to. For privacy questions, or to exercise any of the rights in this policy, email me directly at paul@glenlock.co.uk.

2. What this website does not do

• There are no cookies at all — no first-party, no third-party, no analytics, no consent banner needed.
• There is no advertising, no tracking pixels, and no marketing of any kind.
• There is no account system, no newsletter, and no third-party scripts or fonts.
• Your information is not sold, rented, shared with advertisers, or used to build marketing profiles.
• No decisions are made about you by automated means.

3. What I collect from you

There is no contact form on this website. To make an enquiry, email me directly.

From emails: whatever you write, plus the standard information any email carries (your address, the date, and the headers your mail provider adds). For enquiries about potential work, the lawful basis is pre-contractual measures at your request (UK GDPR Article 6(1)(b)).

4. What is collected when you visit

Basic server information. Like most websites, the server that hosts this site records a little operational information about each request: your IP address, the date and time, the page or file requested, and the outcome. This is used on the basis of legitimate interests (UK GDPR Article 6(1)(f)) to keep the website secure, to understand basic performance, and to investigate problems such as outages or abuse. It is not used to identify individual visitors or to track anything.

5. How your information is used

• To reply to your enquiry and, if you ask me to work with you, to carry out that work.
• To send you updates about a project you have engaged on.
• To keep the site safe from spam and abuse.

That is the full list. Enquiries are not used to build a customer list, to retarget you, or to feed any other service.

6. Third parties involved

Email delivery. You can send enquiries directly to paul@glenlock.co.uk, a mailbox run with the help of Porkbun. Porkbun acts as a processor on my behalf: they carry the email and operate the mailbox. Their own terms and privacy terms (available on their website) apply to that processing, and their service may be located and operated outside the United Kingdom. I do not use any other third-party service on this website.

Your project work. Any data handled while working on a project you engage on is dealt with under the terms we agree for that project, not under this policy.

7. How long things are kept

• Emails: kept as emails in my inbox, which is the deliberate choice — it is boring, it is private, and it is easy for you to ask for a copy or to have things deleted. If you ask me to delete your enquiry, I will delete it and confirm when it is done.
• Server operational logs: kept only as long as is needed to keep the service working and to investigate problems, and removed automatically by log rotation or when the service is restarted.
• Project data: for as long as we agree in the terms for that project, and deleted or returned at the end of it.

8. Your rights (UK GDPR)

Under UK data protection law (the UK GDPR and the Data Protection Act 2018), you have the right to:

• access a copy of the personal information I hold about you;
• ask for incorrect information to be corrected;
• ask for information to be erased, or its processing restricted;
• object to processing based on legitimate interests (such as the server logs);
• receive information in a structured, commonly used format where it was provided and processed by consent or contract.

To make any of these requests, email me directly at paul@glenlock.co.uk and say so. There is no special form, and no queue of lawyers between you and the answer. You also have the right to complain to the UK information regulator, the Information Commissioner's Office (ICO).

9. Security

The site is served over HTTPS, and reasonable technical and organisational measures are used to protect the information collected through it — including the absence of contact forms and third-party scripts that could collect your enquiry details through the website. No method of transmission or storage is completely secure, and I cannot guarantee absolute security.

10. Children

This website is a business service and is not directed at children under 16. I do not knowingly collect personal information from children.

11. Changes to this policy

If this website changes what it collects or how it processes information, this policy will be updated and the date at the top will change. Please check it from time to time.

Contact

Glenlock Ltd (trading as Glenlock Digital) · paul@glenlock.co.uk