Website: www.andrewhill.org.uk
Effective date: 12 October 2026
Last updated: 12 October 2026
1. Introduction
Your privacy matters to me. This Privacy Policy explains how personal information may be collected, used, stored and disclosed when you visit www.andrewhill.org.uk (the “Website”) or contact me through it.
The Website is operated by Andrew Hill. References to “I”, “me” and “my” in this policy refer to Andrew Hill as the person responsible for the Website, unless another organisation is expressly identified.
I aim to handle personal information responsibly and in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable electronic privacy and communications rules.
This policy should be read alongside the Website’s Terms of Use and any additional privacy information provided when you use a particular service or feature.
2. Who is responsible for your information?
For personal information processed in connection with this Website, Andrew Hill is the intended data controller, where applicable under data protection law.
Contact details
Name: Andrew Hill
Website: https://www.andrewhill.org.uk/
Email: [INSERT YOUR PREFERRED CONTACT EMAIL]
If you have questions about this policy, wish to exercise your data protection rights or have concerns about how your information is handled, you can contact me using the details above.
3. Personal information I may collect
The information collected will depend on how you interact with the Website and which features are enabled.
3.1 Information you provide directly
If you contact me or submit information through the Website, I may collect:
- Your name.
- Your email address.
- Your telephone number, if provided.
- The content of your enquiry or message.
- Information you choose to include in correspondence or attachments.
- Any other information reasonably necessary to respond to your enquiry or provide a requested service.
Please only provide personal information that is relevant to your enquiry.
3.2 Technical and usage information
When you visit the Website, certain information may be processed automatically by the website hosting provider, server, security tools or other technologies, where enabled.
This may include:
- Internet Protocol (IP) address.
- Browser type and version.
- Device and operating system information.
- Pages visited and approximate access times.
- Referring websites or web addresses.
- Technical error reports and security logs.
- Information about how the Website is accessed and used.
The information actually collected depends on the Website’s configuration and the services used to operate it.
3.3 Cookies and similar technologies
The Website may use cookies or similar technologies to support essential functionality, security, user preferences, performance measurement or other purposes.
The specific cookies and technologies used will depend on the Website’s configuration and any third-party services that are enabled.
Where required by law, I will provide appropriate information and obtain consent before using non-essential cookies or similar technologies. You should be able to manage your preferences through the Website’s cookie settings where a consent-management tool is provided.
You can also manage cookies through your browser, although disabling certain cookies may affect the Website’s functionality.
For further information, consult the Information Commissioner’s Office guidance on cookies and similar technologies: https://ico.org.uk/
3.4 Information from third parties
Where applicable, I may receive limited information from third-party services used in connection with the Website, such as spam-prevention tools, website analytics providers, social media platforms or communication services.
The information received will depend on the service, your settings and the circumstances of the interaction.
I do not intend to collect personal information from third parties without a legitimate reason for doing so.
4. How I use personal information
Depending on the circumstances, personal information may be used to:
- Respond to enquiries, messages and requests.
- Communicate with individuals who contact me.
- Operate, maintain and improve the Website.
- Monitor technical performance and diagnose errors.
- Protect the Website against spam, fraud, abuse and security threats.
- Maintain appropriate records of correspondence and business interactions.
- Comply with legal and regulatory obligations.
- Establish, exercise or defend legal claims where necessary.
- Measure the effectiveness of Website content or services where appropriate analytics are used lawfully.
I will not use personal information for purposes that are incompatible with the purposes explained in this policy unless a lawful basis exists and any required information is provided.
5. Lawful bases for processing
Under the UK GDPR, personal information must be processed on an appropriate lawful basis.
Depending on the circumstances, I may rely on the following bases:
Legitimate interests: To respond to relevant correspondence, maintain the security of the Website, prevent abuse, administer the Website and improve its operation, provided that these interests do not override your rights and freedoms.
Consent: Where you have freely agreed to a particular use of your information, such as receiving certain marketing communications or the use of non-essential cookies where consent is required. You can withdraw consent at any time, although this does not affect processing carried out lawfully before withdrawal.
Contract: Where processing is necessary to enter into or perform a contract with you, or to take steps you request before entering into a contract.
Legal obligation: Where processing is necessary to comply with a legal obligation.
Legal claims: Where processing is necessary for the establishment, exercise or defence of legal claims, where the relevant lawful basis and conditions apply.
The appropriate lawful basis will depend on the particular processing activity. Not every basis listed above will apply to every interaction.
6. Email communications and marketing
If you contact me by email or through a contact form, I may use your contact details to respond to your enquiry and manage the resulting correspondence.
I will not assume that making an enquiry automatically gives me permission to send unrelated marketing communications.
If I introduce a newsletter, mailing list or other direct marketing service, I will provide appropriate information about how it operates and obtain consent or rely on another lawful basis where legally permitted.
You will be able to unsubscribe from marketing emails using the unsubscribe mechanism provided or by contacting me directly.
Any direct marketing will be conducted in accordance with applicable data protection and electronic communications law.
7. How information may be shared
I do not sell personal information to third parties.
However, information may be disclosed where reasonably necessary and lawful, including to:
- Website hosting and infrastructure providers: To operate and maintain the Website.
- Technical support and security providers: To diagnose problems, protect the Website and prevent malicious activity.
- Communication service providers: To deliver and manage emails or other communications.
- Analytics providers: If analytics services are enabled and their use is lawful.
- Professional advisers: Where necessary for legal, accounting or other professional advice.
- Public authorities and regulators: Where disclosure is required by law or necessary to respond to lawful requests.
- Other parties involved in legal proceedings: Where necessary to establish, exercise or defend legal claims.
Third-party providers may process information on my behalf or act as independent controllers, depending on their role and the arrangements in place.
Where a provider processes personal information on my behalf, appropriate safeguards and contractual arrangements will be used where required by law.
8. International transfers
Some service providers may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, I will take the steps required by applicable data protection law. Depending on the circumstances, these may include relying on UK adequacy regulations, appropriate contractual safeguards or another recognised transfer mechanism.
The actual international transfers, if any, will depend on the services used by the Website.
9. How long information is retained
Personal information will be retained only for as long as reasonably necessary for the purposes for which it was collected, taking account of legal requirements, operational needs and the nature of the information.
For example:
- Enquiries and correspondence: Retained for as long as reasonably necessary to respond, manage the relationship and maintain relevant records.
- Technical and security logs: Retained for a period appropriate to operational and security requirements.
- Legal and business records: Retained for the period required or reasonably necessary to comply with legal obligations or establish, exercise or defend legal claims.
- Marketing preferences and consent records: Retained as necessary to administer preferences, demonstrate compliance and maintain suppression records where appropriate.
Retention periods may vary depending on the circumstances. Information will be securely deleted, anonymised or otherwise disposed of when it is no longer needed, unless continued retention is legally justified.
10. Data security
I take reasonable steps to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Depending on the systems used, these measures may include access controls, software updates, security monitoring, secure hosting and appropriate administrative safeguards.
However, no website, email system or method of electronic transmission can be guaranteed to be completely secure.
You should avoid sending passwords, payment card details or other highly sensitive information through ordinary contact forms or unsecured email.
11. Your data protection rights
Subject to applicable law and any relevant exemptions, you may have the right to:
- Access: Request a copy of the personal information held about you.
- Rectification: Request correction of inaccurate or incomplete information.
- Erasure: Request deletion of your personal information in certain circumstances.
- Restriction: Request that processing be restricted in certain circumstances.
- Data portability: Request certain information in a structured, commonly used and machine-readable format where the right applies.
- Object: Object to processing based on legitimate interests and to direct marketing, subject to the applicable legal rules.
- Withdraw consent: Withdraw consent where processing is based on consent.
- Complain: Raise concerns with the Information Commissioner’s Office.
These rights are not absolute in every circumstance. For example, information may need to be retained to comply with legal obligations or to establish, exercise or defend legal claims.
To exercise a right, please contact me using the details in Section 2. I may need to verify your identity before responding.
I will handle requests within the time limits required by applicable law.
12. Complaints
If you have concerns about how your personal information is handled, please contact me in the first instance so that I can investigate the matter.
You also have the right to complain to the UK Information Commissioner’s Office (ICO).
Website: https://ico.org.uk/
Telephone: 0303 123 1113
The ICO provides independent information and guidance about data protection rights and responsibilities.
13. Children’s privacy
The Website is not specifically directed at children, and I do not knowingly seek to collect children’s personal information unnecessarily.
Where personal information relating to a child is collected, any applicable legal requirements and appropriate safeguards will be observed.
If you believe a child has provided personal information in circumstances where it should not have been collected, please contact me so that the matter can be reviewed.
14. Third-party websites and embedded content
The Website may link to or display content from third-party services, including social media platforms, video providers or other external websites.
When you interact with these services, they may collect information about you, use cookies or process personal information in accordance with their own privacy policies.
I do not control the privacy practices of third parties and encourage you to review their policies before using their services.
Where embedded content or third-party technologies require consent before loading, appropriate consent arrangements should be implemented.
15. Political and public affairs content
The Website may contain material relating to community activities, public affairs, political commentary or public service.
Visiting the Website or reading this material does not, by itself, mean that you are registered with a political organisation, that you support any political position, or that I have inferred your political views.
If you voluntarily provide information relating to political activities or other potentially sensitive matters, any processing of special-category personal data will require an applicable lawful basis and condition under data protection law.
I will not deliberately collect or process special-category personal data through the Website unless there is a lawful and necessary reason to do so.
16. Changes to this Privacy Policy
This Privacy Policy may be updated to reflect changes to the Website, the services used, my data processing practices or applicable law.
The latest version will be published on this page with an updated revision date.
Where required, additional notice or consent will be provided for material changes to how personal information is processed.
17. Contact
For questions about this Privacy Policy, requests relating to your personal information or concerns about data protection, please contact:
Andrew Hill
Website: https://www.andrewhill.org.uk/
Email: hello@andrewhill.org.uk
Last updated: 12 October 2026