Last updated: 18 July 2026
This policy explains what personal data I, Amy Glenister, collect through this website, why I collect it, how I use it, and the rights you have over it. It's written to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who I am
I'm Amy Glenister, and I'm the data controller for any personal data collected through this site. If you have any questions about this policy, or want to use any of the rights below, please get in touch via my contact form at https://amyglenister.co.uk/contact.
What personal data I collect
I only collect personal data that you choose to give me, or that's automatically generated by visiting the site:
- Contact form: your name, email address, subject and message, and whether you've ticked the consent box, when you use the contact form.
- Technical data: standard information such as your IP address, browser type, and pages visited, collected automatically by the web server and hosting provider as part of running the site securely (for example, to prevent abuse and diagnose faults).
- Analytics (only if you accept the cookie banner): the page you visited, an anonymous random ID stored in a cookie so I can tell repeat visits apart from new ones, and the website that referred you here, if any. This is never linked to your name, email address, or IP address, and I don't share it with any third party.
I don't use Google Analytics, advertising, or social media tracking scripts on this site, and I don't collect any special category data (such as health or financial information) through it.
Cookies
This site uses two kinds of cookies. A session cookie and a security (CSRF) cookie are strictly necessary for the site to work, so they don't need your consent. I also use an anonymous analytics cookie to see how many people visit the site and which pages are popular, but only if you accept it in the cookie banner shown when you first visit - it's off by default, no analytics data is shared with or sold to any third party, and you can change your choice at any time using the "Cookie preferences" link in the footer.
Why I use your data, and my lawful basis
- Responding to your enquiry: when you submit the contact form, I use your details to reply to you. This is based on your consent (the checkbox you tick when submitting the form) and my legitimate interest in responding to messages sent to me.
- Keeping the site secure and working properly: technical data is used for the legitimate interest of running, securing, and troubleshooting the site.
You can withdraw your consent at any time by contacting me - see "Your rights" below.
Who I share your data with
I don't sell or share your personal data with third parties for their own marketing purposes. Your data may be processed by:
- My website hosting provider, who stores the site's data on my behalf, only on my instructions, and may be located outside the UK.
- My email provider, if I reply to your enquiry by email.
How long I keep your data
I keep contact form submissions for as long as needed to respond to your enquiry and for a reasonable period afterwards, in case you follow up - typically no longer than 24 months, unless I'm legally required to keep it for longer or you ask me to delete it sooner. Anonymous analytics data (if you've accepted the cookie banner) is kept for up to 26 months, in line with common web analytics practice.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data I hold about you.
- Correct inaccurate or incomplete data.
- Erase your data (the right to be forgotten), where there's no good reason for me to keep it.
- Restrict how I use your data.
- Object to me processing your data.
- Request a copy of your data in a portable format (data portability).
- Withdraw consent at any time, where I'm relying on consent to use your data.
To use any of these rights, please get in touch via my contact form at https://amyglenister.co.uk/contact. I'll respond within one month.