// privacy
Privacy policy.
What we collect
When you submit a form on this site (contact, emergency, speaking or newsletter), we collect:
- Your name and email address (provided by you).
- Your IP address and browser user-agent string (collected automatically for spam analysis).
We also use Google Analytics 4 (GA4) to collect anonymous usage statistics. GA4 does not set cookies until you grant consent via the cookie banner.
Why we collect it
- Newsletter delivery - to send you new blog posts and occasional updates.
- Spam analysis - IP addresses, user-agent strings and honeypot field data are logged to identify and block automated bot submissions.
- Service analytics - aggregated GA4 data helps us understand how the site is used and where to improve.
Newsletter
Subscriber data (name, email, consent status and signup source) is stored in a managed MySQL database hosted on DigitalOcean. Your data is used solely to send you post notifications and is never sold, rented or shared with third parties.
Contact forms
Form submissions are delivered to us via Postmark (our transactional email provider). Submission metadata (form type, email, IP, user-agent) is logged in our database for bot analysis purposes.
Cookies
GA4 analytics cookies are only set after you grant consent via the cookie banner. We use localStorage for non-tracking preferences (e.g. newsletter dismissal, cookie consent state). These are not cookies and contain no personal data.
Data retention
- Subscriber data - retained until you unsubscribe or request deletion.
- Form submission logs - retained for up to 2 years for spam analysis, then deleted.
- GA4 data - retained per Google's default retention settings (14 months).
Your rights
Under the UK GDPR (Articles 15-17), you have the right to:
- Access - request a copy of the personal data we hold about you.
- Rectification - request correction of inaccurate data.
- Erasure - request deletion of your personal data.
- Withdraw consent - unsubscribe from the newsletter at any time.
To exercise any of these rights, email [email protected].
Contact
For privacy enquiries, contact [email protected].
Data controller
James H. Gordy, trading as Deviant Ops.
C/O Brennan Herriott & Co, 1 Blatchington Road, Hove, BN3 3YP.