Privacy Policy

Introduction

Andy Kemp Consulting Ltd ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use and protect information you provide when using this website or engaging with our services.

Information We Collect

We may collect and process the following information:

• Contact information: Name, email address, telephone number, organisation name
• Enquiry information: Details you provide in contact forms or email correspondence
• Technical information: IP address, browser type, device information, pages visited
• Reader account information: Email address, profile information you provide, and authentication/session information when you create an account or sign in through Clerk
• Reader library: Saved post references and a history of successful post/series PDF downloads associated with your account ID
• Blog subscriptions: Your email address, the topics or series you choose, confirmation status, and a record of which notifications were sent to you
• Comments: Your name, comment text and, if you provide it, your email address
• Abuse prevention: One-way (SHA-256) hashes of IP addresses and email addresses used to limit repeated form submissions, and the times of PDF download requests

How We Use Your Information

We use your information to:

• Respond to enquiries and provide requested information
• Deliver consulting services and support
• Authenticate reader accounts and provide access to post and series PDF downloads
• Send blog notifications you have chosen to receive
• Moderate and publish comments
• Protect the website and its forms from spam and abuse
• Improve our website and services
• Comply with legal obligations

Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: When you provide information through contact forms or email, and for blog subscriptions, which you can withdraw at any time using the unsubscribe link in every email
• Legitimate interests: To respond to enquiries, operate our business, provide reader accounts, moderate comments and protect the website from abuse
• Contract: To deliver services you have engaged us to provide

Data Sharing

We do not sell, rent or share your personal data with third parties except:

• When required by law
• To service providers who support our business operations (e.g., email hosting, website hosting)
• With your explicit consent

Service Providers

We use the following providers to run this website. They process personal data on our behalf only as needed to provide their services:

• Cloudflare: Website hosting, server functions, the database that stores subscriptions, reader libraries and abuse-prevention records, and the browser service that renders PDF downloads
• Clerk: Reader account registration, sign-in and account management
• SMTP2GO: Delivery of confirmation, notification, welcome and enquiry emails
• GitHub: Storage of website content and submitted comments in a private repository
• Gravatar (Automattic): Profile images shown beside comments. If you give an email address with a comment, we publish only a one-way hash of it so your Gravatar image can be shown. When you view comments, your browser loads these images from Gravatar.

Reader Accounts

We use Clerk to provide reader registration, sign-in and account management. Clerk processes account and authentication information to provide this service. See Clerk's Privacy Policy for information about its processing practices.

Creating a reader account does not subscribe you to newsletters or marketing emails. Any newsletter subscription is a separate choice.

We send an account welcome email to your verified primary email address and record its delivery against your account ID to avoid repeat welcomes. This account message is separate from optional blog subscriptions.

Your saved posts and download history are stored against your account ID so they are available across devices. You can remove saved posts and clear download history from My Account. Download history records when a PDF was successfully generated for you; it cannot confirm that your browser kept the file. You can delete all of this data at any time with Delete my saved data in My Account, and it is deleted automatically if you delete your reader account.

PDF downloads are generated by Cloudflare's browser rendering service from this website's own pages. Your sign-in token is used only to authorise each request and is not stored.

Blog Subscriptions and Comments

Blog subscriptions require you to confirm your email address. Changes to your preferences take effect only after you confirm them by email. You can change your preferences or unsubscribe at any time using the links in every email.

Comments are reviewed before publication. Only your name, comment text and, where applicable, the Gravatar hash described above are shown publicly. Your email address is never displayed.

If you ask to be emailed when someone replies to a comment thread, we store your email address and the thread you subscribed to, and send a confirmation email first. You will only receive reply notifications after confirming. Every notification includes a link to unsubscribe, and we stop sending as soon as you do.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, or resolve disputes. In particular:

• Abuse-prevention hashes and PDF request times are deleted automatically after 24 hours.
• Unconfirmed subscription changes expire after 24 hours.
• Subscription details are kept until you unsubscribe or ask us to delete them.
• Saved posts are kept until you remove them or ask us to delete your account data. Download history keeps your 50 most recent entries until you clear it.

Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to processing of your data
• Request restriction of processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, please contact us at [email protected].

Cookies

This website does not use cookies for tracking or analytics. We use Cloudflare Web Analytics, a privacy-first service from our hosting provider, to see aggregated traffic statistics such as page views, referrers and page load performance. It does not use cookies or local storage, does not fingerprint visitors and does not track you across websites. If this changes, we will update this policy and provide appropriate notice and consent mechanisms.

Reader sign-in uses essential authentication and session cookies provided by Clerk. These are separate from optional analytics preferences. See our Cookie Policy for more information.

Third-Party Links

This website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. Please review their privacy policies independently.

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. However, no method of transmission over the internet is completely secure.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.

Contact Us

If you have questions or concerns about this privacy policy or how we handle your data, please contact us:

Andy Kemp Consulting Ltd
Email: [email protected]
Telephone: +44 131 376 1802

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK.

Website: https://ico.org.uk