Privacy Policy
Last updated: 13 July 2026
This Privacy Policy explains how Steven Kelly (“we”, “us”, “our”) collects, uses, stores and shares personal data when you use www.stevenkelly.uk (the “Website”), and what rights you have under UK data protection law.
If you have questions, contact: steven1640@live.co.uk
1) Who is responsible for your data?
Data Controller: Steven Kelly
Email: steven1640@live.co.uk
2) The data we collect
A) Data you give us
When you contact us, enquire, or interact with the Website, you may provide:
- Name
- Email address
- Phone number (if you include it)
- Your message / enquiry details
- Any other information you choose to send us
B) Data collected automatically (usage data)
When you browse the Website we may collect data such as:
- IP address
- Device and browser type/version
- Pages visited, time spent, clicks and referring pages
- Approximate location (derived from IP)
- Diagnostic/security information
C) Cookies and similar technologies
We may use cookies (small files stored on your device) and similar tools to:
- make the Website work properly
- remember preferences
- understand how visitors use the Website
- improve performance and security
Google Analytics, Meta Pixel and Facebook Messenger remain off unless you select “Accept optional” in the cookie controls. Selecting “Reject optional” leaves them off. You can reopen your choice at any time using the Cookie settings button. Webflow may still process essential hosting and security data needed to serve the Website.
3) How we use your data (and our lawful bases)
Under UK GDPR we must have a lawful basis to process your personal data. We use your data for:
A) To respond to enquiries and messages
- Purpose: replying to you and managing your request
- Lawful basis: Legitimate interests (running the Website and responding to enquiries) and/or Contract (if your enquiry leads to an agreement)
B) To run, protect and improve the Website
- Purpose: analytics, troubleshooting, preventing fraud/abuse, security monitoring
- Lawful basis: Legitimate interests
C) Marketing and updates (only if you opt in)
- Purpose: sending updates you requested (e.g., newsletters or announcements)
- Lawful basis: Consent
You can opt out at any time by using the unsubscribe link (if provided) or emailing steven1640@live.co.uk.
D) Legal and compliance
- Purpose: record-keeping, resolving disputes, enforcing rights
- Lawful basis: Legal obligation and/or Legitimate interests
4) Who we share data with
We only share personal data when necessary, for example with:
- Website/hosting and IT providers
- Analytics providers (to understand site performance)
- Email or communication providers (to reply to you)
- Payment/booking providers only if you choose to use them via links from this Website
- Professional advisers (e.g., legal/accounting) where needed
- Law enforcement or regulators if legally required
We do not sell your personal data.
5) Third-party links and embedded content
The Website may include links to third-party sites (e.g., social platforms, video/audio players, booking providers). If you click those links or view embedded content, third parties may collect data and set cookies under their policies. We do not control their practices.
6) International transfers
Some service providers may process personal data outside the UK. Where this happens, we take steps to ensure appropriate safeguards are in place (for example, approved contractual protections) to protect your data.
7) How long we keep your data
We keep personal data only as long as necessary for the purposes above. As a guide:
- Enquiries and correspondence: typically kept for up to 24 months, unless we need it longer for an ongoing matter or legal reasons
- Security/usage logs: retained for shorter periods unless required for investigation or protection of the Website
You can request deletion at any time (see your rights below). In some cases we may need to keep certain data to comply with legal obligations.
8) How we protect your data
We use reasonable technical and organisational measures to protect personal data. However, no website or transmission is 100% secure, and you use the internet at your own risk.
9) Children’s privacy
This Website is not intended for children under 13. We do not knowingly collect personal data from children under 13.
If you believe a child has provided us personal data, contact steven1640@live.co.uk and we will delete it where appropriate.
10) Your rights (UK GDPR)
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data (in certain cases)
- Restrict processing (in certain cases)
- Object to processing based on legitimate interests
- Data portability (in certain cases)
- Withdraw consent at any time (where we rely on consent)
To exercise any rights, email steven1640@live.co.uk.
We may ask for information to verify your identity before responding.
11) Complaints
If you’re unhappy with how we handle your data, please contact us first at steven1640@live.co.uk so we can try to resolve it.
You also have the right to complain to the Information Commissioner’s Office (ICO) (the UK data protection regulator).
12) Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be posted on this page with an updated “Last updated” date.
Contact
If you have questions about this Privacy Policy, email: steven1640@live.co.uk
