Privacy Policy
This is the privacy policy for tommywilliams.co.uk, a personal portfolio website operated by Tommy Williams (sole trader, Devon, United Kingdom). It explains what personal data is collected when you use this site, how it's used, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who is the data controller?
Tommy Williams. You can reach me at hello@tommywilliams.co.uk for any privacy question, including requests to exercise your rights under UK GDPR.
What data is collected
Analytics
This site uses Vercel Web Analytics, which collects aggregated, anonymised information about page views and performance. Vercel's analytics are cookieless and do not use persistent identifiers: visitors are not tracked across sessions and no personal data is stored. See Vercel's analytics privacy policy for details. No data is shared with advertising networks.
Contact
If you email me at the address above, your email address and whatever you choose to include in the message are processed so I can respond. I keep those messages for as long as needed to maintain our professional relationship (typically indefinitely unless you ask me to delete them). Lawful basis: legitimate interest in responding to correspondence, or performance of a contract if we're working together.
Embedded media
Pages on this site embed content from YouTube and Spotify. When you interact with those embeds (for example, pressing play), those providers may set their own cookies and process data according to their own privacy policies: Google / YouTube, Spotify. I don't control what those third parties collect.
Cookies
This site does not set any first-party cookies of its own. See the Cookie Policy for details on third-party cookies that may be set by embedded media.
Where your data goes
Hosting and analytics: Vercel Inc. (USA, with EU data processing). Vercel acts as a data processor under UK GDPR. No personal data is transferred to other third parties.
How long is data kept?
- Analytics: aggregated only; no individual-level retention.
- Email correspondence: indefinitely, unless you ask me to delete it.
Your rights
Under UK GDPR you have the right to:
- Access the personal data I hold about you;
- Have inaccurate data corrected;
- Have your data erased (where there's no overriding lawful basis to keep it);
- Restrict or object to certain kinds of processing;
- Receive your data in a portable format;
- Lodge a complaint with the Information Commissioner's Office (ICO).
To exercise any of these, email hello@tommywilliams.co.uk. I'll respond within 30 days.
Changes to this policy
I'll update this policy when things change. The date at the top of the page reflects the most recent revision.