Last updated: 12 April 2026
Website: https://paulreynolds.uk
Data Controller: Paul Reynolds (“we”, “us”, “our”)

This Privacy Policy explains how we collect, use, store and share personal data when you visit this website, contact us, or book time with us. It also explains your rights under the UK GDPR and the Data Protection Act 2018.

1) Who we are

Our website address is: https://paulreynolds.uk

Contact (privacy):
Email: preynolds@ydc.is
Business address: [your business address]
Phone: +44-798-000-4379

2) What personal data we collect

A) When you contact us (Contact Form 7)

If you submit an enquiry using our website forms (powered by Contact Form 7), we collect the information you provide, which may include:

• Name
• Email address
• Phone number (if provided)
• Company name (if provided)
• The contents of your message and any attachments (if enabled)

Why we collect it: to respond to your enquiry and provide the information or support you request.

B) When you book a call (Calendly)

If you book a meeting using Calendly, Calendly will collect details needed to schedule the meeting, typically:

• Name
• Email address
• Meeting preferences/time slot
• Any information you submit in booking questions (if configured)

Calendly acts as a separate service provider and may process data as a controller for some purposes (e.g. providing and securing their service). You should also review Calendly’s privacy information: https://calendly.com/privacy

C) Website usage data (analytics and logs)

When you browse the site, we (and our service providers) may collect:

• Pages you visit and interactions with the site
• Device and browser information
• Approximate location (e.g. city/region level)
• Referral source (e.g. Google, Bing, DuckDuckGo, ChatGPT)

This data may be collected via cookies and similar technologies (see Section 5).

D) What we do not collect

• We do not enable blog comments on this website, so we do not collect comment data or use Gravatar via comments.
• We do not provide public user accounts for website visitors, so we do not collect account registration or password reset data for visitors.

3) How we use your personal data

We use personal data to:

• respond to enquiries and provide requested information
• schedule and manage meetings/consultations
• deliver services and communicate with clients
• improve website performance and content
• maintain website security and prevent abuse
• comply with legal obligations

4) Lawful bases for processing (UK GDPR)

We process personal data under one or more lawful bases:

• Consent – where you consent to non-essential cookies/analytics via our cookie banner (where required).
• Legitimate interests – to run and improve our business, respond to enquiries, and keep the site secure (balanced against your rights).
• Contract – where processing is necessary to provide services you request or to take steps prior to entering a contract.
• Legal obligation – where we must comply with legal or regulatory requirements.

5) Cookies and consent

We use cookies and similar technologies to operate the site and (if you consent) to understand how it is used.

A) Necessary cookies

These cookies are required for the site to function and to store your cookie preferences.

B) Analytics cookies (Google Analytics 4)

If you accept analytics cookies, we use Google Analytics 4 (GA4) to measure website usage (e.g. pages visited, traffic sources, general device information). This helps us improve the site and content.

Google may process data in accordance with its own privacy policy: https://policies.google.com/privacy

C) Managing cookies

You can change your cookie preferences at any time using the cookie settings/consent tool on this website. You can also control cookies via your browser settings.

6) Sharing your personal data

We do not sell your personal data.

We may share data with trusted suppliers who help us operate the website and deliver services, such as:

• Website hosting and IT providers
• Analytics providers (e.g. Google)
• Scheduling provider (Calendly)
• Email and communication providers
• Security and anti-spam tools (where used)

These suppliers are required to protect your data and only process it for the services they provide.

7) International transfers

Some providers (such as Google and Calendly) may process data outside the UK. Where data is transferred internationally, we rely on appropriate safeguards (such as adequacy regulations or approved contractual protections) to protect your personal data.

8) How long we keep your data

We keep personal data only as long as necessary.

Typical retention:

• Enquiries (contact form/email): up to [12–24 months] after last contact unless you become a client.
• Client records: for the duration of the engagement and then for [2 years] for legal/accounting requirements.
• Analytics: retained according to our GA4 settings.

9) Your rights

You have rights under UK data protection law, including:

• access to your personal data
• correction of inaccurate data
• deletion (in certain circumstances)
• restriction or objection to processing (in certain circumstances)
• data portability (where applicable)
• withdrawal of consent (where processing is based on consent)

To exercise your rights, contact: [your email address]

You can also complain to the UK regulator, the ICO:
https://ico.org.uk/

10) Security

We take reasonable technical and organisational measures to protect personal data. No online service is completely secure, but we work to protect your information.

11) Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with the “Last updated” date.