Legal

Privacy Policy

Last updated: 5 July 2026

This policy explains what personal data this website (pattaz.co.uk) collects, why, and what your rights are. It applies to anyone who visits the site or gets in touch through it.

Who I am

This site is run by Aaron Pattison ("I", "me", "my"), who is the data controller for the personal data described here. If you have any questions, or want to exercise your data rights, email me at aaronpattaz@live.com.

What I collect and why

Analytics

With your consent, I use Google Analytics 4 to understand how the site is used — for example which pages are viewed, roughly where visitors are based (country/city), and what device and browser they use. Google Analytics sets cookies and processes data such as a truncated IP address, device and browser information, and on-site activity. GA4 does not store full IP addresses.

• Legal basis: your consent.
• No analytics cookies are set until you choose Accept on the cookie banner. You can decline, and you can withdraw consent at any time using the "Cookie preferences" link in the site footer.
• Analytics data is processed by Google on my behalf.

Contact form

If you use the contact form, I collect the name, email address and message you provide, along with your IP address, so I can read and respond to your enquiry.

• Legal basis: my legitimate interest in responding to enquiries and in preventing spam and abuse, and your consent in sending the message.
• Your IP address is included with the enquiry email to help identify and prevent spam or abusive submissions.
• Your message is delivered to my inbox using SMTP2GO, an email delivery service acting as a processor on my behalf.
• To reduce spam, the form is protected by Cloudflare Turnstile, which processes limited technical information (such as your IP address and browser signals) to tell humans from bots.
• Retention: I keep contact enquiries for up to 6 months, unless they relate to an ongoing project or discussion, in which case I keep them for as long as needed for that purpose.

Cookies and local storage

The site uses:

• Google Analytics cookies (e.g. _ga, _ga_*) — only after you accept. Used to measure site usage.
• A small piece of local storage that remembers your cookie choice (accept or decline) so you're not asked again. This is essential to respecting your choice and doesn't track you.

You can change or withdraw your choice at any time via "Cookie preferences" in the footer, or by clearing this site's cookies and storage in your browser.

Who I share data with

I don't sell your data. It's shared only with the service providers that help run the site: Google (Google Analytics), SMTP2GO (email delivery for the contact form) and Cloudflare (Turnstile spam protection). These providers may process data outside the UK/EEA (for example in the United States). Where that happens, appropriate safeguards such as the UK International Data Transfer Agreement (or equivalent) are relied upon.

How long I keep data

• Analytics: retained according to my Google Analytics settings, then deleted.
• Contact enquiries: up to 6 months, or longer if part of an ongoing project or discussion.

Your rights

Under UK data protection law you have the right to:

• access the personal data I hold about you;
• ask me to correct or delete it;
• object to, or ask me to restrict, how I use it;
• withdraw consent for analytics at any time;
• request a copy of your data (portability).

To exercise any of these, email aaronpattaz@live.com and I'll respond within one month.

Complaints

If you're unhappy with how I've handled your data, you can complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Changes to this policy

I may update this policy from time to time. The "last updated" date at the top shows when it last changed.