Privacy

Last updated: 29 May 2026

This privacy policy explains what personal data I collect when you visit leivars.uk, why I collect it, what I do with it, and the rights you have over it. I've kept it plain English on purpose — if anything is unclear, get in touch and I'll explain.

Who I am

This site is operated by Bradley Leivars as an individual (data controller for the purposes of UK GDPR).

For any questions about this policy, or to exercise any of your data rights, contact me at bradley@leivars.uk.

I am not currently registered with the Information Commissioner's Office, as this site's data processing falls within the available exemptions for personal websites operating at this scale. If that changes, this policy will be updated.

What data I collect, and why

1. Contact form submissions. If you fill in the contact form on this site, I collect your name, email address, phone number (if you choose to provide it), and the message you send. I use this information solely to respond to your enquiry. The legal basis for this is your consent (you've chosen to send me a message) and my legitimate interest in responding to enquiries directed at me.

2. Analytics data. This site uses Google Analytics to understand how visitors find and use the site, so I can improve it over time. Google Analytics sets cookies and collects information about your visit, including approximate location, device and browser type, pages viewed, and how you arrived at the site. This data is processed by Google and may be transferred to and stored on Google's servers outside the UK. The legal basis is your consent, given through the cookie banner shown on your first visit.

You can decline analytics cookies at any time by using the cookie banner, and you can install Google's official opt-out browser add-on for a permanent opt-out across all sites.

3. Server and routing data. Standard technical information (such as IP address, user agent, and request timestamps) is automatically processed by my hosting and infrastructure providers in the course of delivering the site and forwarding email. This is necessary for the site and email to work and is not used for any other purpose.

Cookies

This site uses two categories of cookies:

• Necessary cookies set by Webflow (the platform that hosts the site) to ensure the site functions correctly. These do not require consent.
• Analytics cookies set by Google Analytics, as described above. These require your consent, which you can give, withdraw, or change at any time using the cookie banner.

I don't use advertising cookies, tracking pixels, or any cross-site tracking.

Who I share data with

I don't sell, rent, or share your data with anyone for marketing purposes. The only parties that process data on my behalf are the service providers I rely on to operate the site:

• Webflow (USA) — hosts the site and processes form submissions.
• Cloudflare (USA) — handles DNS and routes inbound email at @leivars.uk to my mailbox.
• Google (USA) — provides Gmail (where my email is received) and Google Analytics.

These providers operate in the United States and may store data outside the UK. They are obliged to provide an adequate level of protection for personal data under UK GDPR (typically via the UK Extension to the EU–US Data Privacy Framework or Standard Contractual Clauses).

How long I keep your data

• Contact form submissions: I keep your message and contact details until your enquiry is resolved, plus a further 12 months in case follow-up is needed, after which I delete them.
• Analytics data: Google Analytics retains data according to my account's data retention settings (default: 14 months) and Google's own policies.
• Anything sensitive you send me: I don't request CVs or other sensitive information through the contact form, but if you choose to send any, I treat it confidentially and delete it as soon as it's no longer needed for the purpose you sent it.

Your rights

Under UK GDPR you have the right to:

• Access the personal data I hold about you.
• Correct anything that's inaccurate.
• Delete your data (the "right to be forgotten"), subject to my legal obligations.
• Restrict or object to my processing of it.
• Withdraw consent at any time, where consent is the basis for processing.
• Portability — receive your data in a structured, commonly used format.

To exercise any of these rights, email me at bradley@leivars.uk and I'll respond within a month (usually much sooner).

If you're not satisfied with how I've handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Security

I take reasonable care to protect your data. Form submissions are transmitted over HTTPS, the email account that receives them is protected by two-factor authentication, and only I have access to it. No system is completely secure, but I keep this in mind when handling anything you send me.

Changes to this policy

If I make material changes to this policy, I'll update the "Last updated" date at the top and, where appropriate, note what's changed. For ongoing enquiries already in progress, I'll notify you directly if changes affect how your data is handled.