Short version: the only personal data this website collects is whatever you type into the contact form. I use it to reply to you. I don’t sell it, I don’t subscribe you to anything, and I delete it when it’s no longer useful. The long version is below.

Effective date: 21 April 2026

Who I am

This website is operated by Jason Westwood, trading as Westwood Digital Advisory. For data protection purposes I’m the data controller for any information you send me through this site.

Contact: hello@westwooddigital.co.uk
Postal address: available on request
ICO registration: registration pending — will be added here once issued

What I collect

If you fill in the contact form on this website, I receive the following:

• Your name
• Your company name
• Your email address
• The enquiry type you selected (if any)
• The message you wrote
• Which page of the website you submitted the form from

That’s it. I don’t run analytics on this website, I don’t track you across other sites, and I don’t set cookies of my own. Your IP address and browser details are visible to my hosting provider and to Formspree (the form processor — see below), in the normal course of them keeping the service running, but I don’t collect or use them.

Why I collect it

To reply to you. That’s the only purpose. If your enquiry turns into an engagement and you become a client, your information will then be processed under whatever contract we agree — but that’s a separate matter and I’ll explain it at the time.

Under UK GDPR, my legal basis for processing your contact-form submission is legitimate interest: specifically, responding to a business enquiry you’ve initiated. You haven’t subscribed to a newsletter or a marketing list by submitting the form, and I won’t treat you as if you have.

Who else sees it

Two third parties are involved in moving your form submission from your browser to my inbox:

• Formspree (Formspree, Inc., based in the United States) processes the form submission and forwards it to me. They act as a data processor on my behalf. Their privacy policy is at formspree.io/legal/privacy-policy. They hold submissions on their servers for a short period so I can review them in their dashboard if my email misses one.
• IONOS (IONOS SE, Germany) hosts this website. They don’t see your form submissions as content, but standard server logs — including IP addresses of visitors — pass through their infrastructure. Their privacy policy is at ionos.co.uk/terms-gtc/privacy-policy.

When your data reaches me, it lives in my business email. My email is hosted with a mainstream UK-appropriate provider with sensible security in place — MFA, recovery processes, the usual. I don’t put enquiry information into any other system unless we enter into a contract, at which point I’ll tell you which tools I use.

I don’t sell your data, I don’t share it with marketing partners, and I don’t use it to profile you.

International transfers

Formspree is based in the United States. Your submission therefore briefly travels outside the UK. Formspree relies on standard contractual clauses for this transfer, which is the mechanism UK law recognises for moving personal data to the US. If you’re uncomfortable with a US-based form processor, you can email me directly instead of using the form and your data never leaves the UK.

How long I keep it

If your enquiry doesn’t lead anywhere, I delete it within 24 months. If it turns into a conversation that doesn’t become an engagement, I keep the email trail for up to 24 months after our last exchange in case you come back. If you ask me to delete it sooner, I will.

If you become a client, correspondence related to our engagement is kept for as long as it’s reasonably needed for tax, contractual, or professional-liability reasons — typically six years after the engagement ends, which matches standard UK retention for business records.

Your rights

Under UK GDPR you have the right to:

• Access — ask me what information I hold about you
• Correct — ask me to fix anything that’s wrong
• Delete — ask me to remove your information (subject to the tax/contract exceptions above)
• Object — tell me to stop processing your information
• Portability — ask for a copy of your information in a common format
• Withdraw consent — where I’m relying on consent (I’m not, on this website, but the right still exists)

To exercise any of these, email me at hello@westwooddigital.co.uk. No specific form, no bureaucracy — a sentence explaining what you want is fine. I’ll respond within a working day and action the request within a month (which is the UK GDPR requirement).

If you’re not happy with how I’ve handled your data, you can complain to the UK’s Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113. I’d rather you talked to me first, but you don’t have to.

Cookies and tracking

This website doesn’t set any cookies of its own. It doesn’t run Google Analytics, Facebook Pixel, or any other tracking tool. A small number of technical cookies may be set by WordPress if you log in to the admin (which only I do), and Formspree sets a session cookie briefly while you submit the form — but nothing that tracks you across pages, across visits, or across other sites.

If I add analytics later, this page will be updated first, and the analytics I’d use is cookie-free by design (most likely Plausible).

Children

This website is aimed at UK business owners and directors. It’s not designed for or directed at anyone under 18. If you’re under 18, please don’t use the contact form without an adult’s involvement.

Changes to this policy

If I update this page materially — for example, if I add analytics or change how I handle data — I’ll update the effective date at the top and make sure anyone with an active enquiry with me knows about the change. Trivial updates (typo fixes, clarifications) won’t trigger a notification.