Privacy Policy

Last updated: 17 July 2026

1. Data Controller

The data controller responsible for your personal data is:

2. What Data We Collect

We collect and process the following categories of personal data when you interact with our website and services:

2.1 Contact Form Data

When you submit our contact form, we collect: your first name, last name, email address, telephone number (if provided), organisation name, service interest, project budget range, and project description. This data is collected for the purpose of responding to your enquiry and providing the services you have requested.

2.2 Cookies and Analytics Data

We use essential cookies to ensure our website functions properly and analytics cookies to understand how visitors interact with our site. Analytics data may include your IP address, browser type, operating system, referring URLs, pages viewed, and time spent on each page. For full details, please refer to our Cookie Policy.

2.3 Server Logs

Our web hosting provider automatically collects standard server log data including your IP address, browser user agent string, pages requested, date and time of access, and referring URL. This data is collected for security monitoring and website performance purposes.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the UK General Data Protection Regulation (UK GDPR):

• Consent: When you submit our contact form or accept analytics cookies, you provide your explicit consent for us to process that data for the stated purposes. You may withdraw your consent at any time by contacting us.
• Legitimate Interest: We process server log data and essential cookie data on the basis of our legitimate interest in maintaining the security and performance of our website. This processing is necessary for the proper functioning of our online services and does not override your rights and freedoms.
• Contract: Where you engage us for services, we process your personal data as necessary for the performance of our contract with you.

4. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form enquiries: Retained for 24 months from the date of submission, unless the enquiry leads to a client engagement, in which case data is retained for the duration of the relationship plus 6 years for tax and legal purposes.
• Analytics data: Retained for 26 months from the date of collection, in accordance with standard analytics data retention practices.
• Server logs: Retained for 12 months for security and performance monitoring purposes.
• Client project data: Retained for the duration of the client relationship plus 6 years to comply with UK tax and legal record-keeping requirements.

5. Cookies

Our website uses the following categories of cookies:

• Essential cookies: Required for the website to function properly, including session management and cookie consent preferences. These cookies do not require your consent as they are strictly necessary.
• Analytics cookies: Used to understand how visitors interact with our website, helping us improve our content and user experience. These cookies are only placed with your explicit consent.

For comprehensive information about the specific cookies we use, their purposes, and how to manage them, please see our Cookie Policy.

6. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request that we delete your personal data, subject to any legal obligations requiring us to retain it.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where we are relying on legitimate interest as our legal basis.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at christian@rpaulharris.com. We will respond to your request within one month.

7. Right to Complain

If you believe that we have not handled your personal data properly or that we have not complied with your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority set up to uphold information rights:

We would appreciate the opportunity to address your concerns before you approach the ICO. Please contact us at christian@rpaulharris.com in the first instance.

8. Data Sharing

We do not sell, trade, or rent your personal data to third parties. We may share your data with the following categories of recipients where necessary:

• Hosting providers: Our website is hosted by third-party providers who may process server log data on our behalf.
• Analytics providers: Where you have consented to analytics cookies, anonymised usage data may be processed by our analytics service provider.
• Professional advisers: We may share data with our accountants, lawyers, or other professional advisers where necessary for legal or regulatory compliance.
• Legal requirements: We may disclose your data where required by law, regulation, or court order.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit (SSL/TLS), access controls, and regular security reviews. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. Any significant changes will be communicated via our website. We encourage you to review this policy periodically. The date of the last update is shown at the top of this page.

11. Contact

For any questions or concerns about this Privacy Policy or our data practices, please contact us at christian@rpaulharris.com.