Privacy Policy

Who controls your data

Josh Willett Consultancy Ltd is the data controller for personal data collected through joshwillett.com.

What information is collected

The information collected depends on how you use the website.

• When you send an enquiry, the form collects your name, email address, website, company information and message.
• When you correspond by email or phone, the information you provide forms part of that business correspondence.
• Google Analytics 4 collects usage information such as pages viewed, approximate location, device and browser information, referral source and interactions with the website.
• Cloudflare may process technical request data, including IP address, browser information and security signals, to deliver and protect the website.

Why the information is used

Personal data is used to respond to enquiries, discuss requested services, deliver agreed work, maintain business records, protect the website and understand how visitors use it.

The legal basis depends on the activity. Enquiry handling and website security rely on legitimate interests and steps requested before entering a contract. Client work and related records are processed to perform a contract and meet legal obligations.

Cookies and analytics

The website uses Google Analytics 4 to measure traffic and site usage. Google Analytics may place or read analytics cookies and process related device information. You can restrict cookies through your browser settings or use Google's analytics opt-out tools.

Cloudflare may use essential security and performance cookies where needed to protect and deliver the website.

Service providers

The website and enquiry process use a small number of service providers acting under their own terms and data-protection commitments:

• Cloudflare for hosting, content delivery and website security.
• Resend to send contact-form enquiries to the company inbox.
• Google Workspace for email and business correspondence.
• Google Analytics 4 for website measurement.
• Google Fonts for delivery of the website's typefaces.

Some providers may process data outside the United Kingdom. Where that happens, the provider's contractual safeguards and applicable transfer mechanisms govern the processing.

How long information is kept

Enquiry and correspondence records are kept only for as long as they remain relevant to the enquiry, relationship or a legal requirement. Client and accounting records may be retained for the periods required by tax, company and contractual law.

Your rights

Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase or restrict personal data, object to processing, request portability and withdraw consent where consent is the legal basis.

To make a request, email [email protected]. You can also complain to the Information Commissioner's Office.

Changes to this policy

This policy may be updated when the website, service providers or legal requirements change. The latest revision date appears at the top of the page.