Privacy Policy

Information we collect

We may collect the following types of information when you interact with this site:

• Information you voluntarily provide (e.g. when contacting us by email, such as your name, email address, and any other details you choose to share).
• Technical information needed to deliver and secure the website and its content, such as IP address, browser type and requested files.
• If you accept analytics cookies, information about visits, pages viewed, traffic sources and clicks on our enquiry buttons.

How we use your information

We use the information collected to:

• Respond to enquiries and provide services you request
• Improve the content, functionality, and performance of the website
• Maintain security and prevent misuse
• Comply with any legal obligations

We do not sell, rent, or trade your personal information to third parties.

We rely on legitimate interests to respond to business enquiries, run our consultancy practice and operate and secure this website. Where processing is necessary to take steps at your request before a contract with you, or to perform that contract, we rely on contract. We rely on legal obligation where the law requires us to keep or use information.

We rely on your consent for optional Google Analytics measurement. You can withdraw that consent at any time through Cookie settings in the footer.

Sharing your information

We may share information where required by law, or with service providers that support our email and website. Where a provider processes information on our behalf, appropriate data protection arrangements are required.

We use Netlify to host and deliver this website, Sanity to manage its content, and Microsoft 365 to handle email enquiries. These providers process the information needed to supply and secure their services.

The website also loads typefaces from Google Fonts and images from Substack and Instagram. When these resources load, the providers may receive technical information such as your IP address and browser details. Further information is available in the privacy notices for Netlify, Sanity, Microsoft, Google, Substack and Meta. Following external links takes you to websites with their own privacy policies.

Some providers process personal information outside the UK, including in the United States. Their applicable terms describe the arrangements for international transfers, including adequacy arrangements and contractual safeguards where required. Details are available in Netlify’s data-processing agreement, Sanity’s data-processing agreement, Microsoft’s privacy statement and Google’s Analytics data-processing terms. Please contact andrew@andrewgroves.com if you would like further information.

Website analytics

With your consent, we use Google Analytics 4 to understand visits, traffic sources, popular pages and interest in our services. Analytics can record device and browser details, approximate location and clicks on enquiry buttons. An enquiry-button click does not tell us whether an email was sent or a commission was agreed.

Google Analytics is blocked until you accept analytics cookies. Rejecting them does not affect access to the website. We do not use Analytics for advertising or Google Signals. We do not send email contents or enquiry details to Analytics, and we remove query strings and fragments from the page addresses we send.

Analytics does not run in the website editor or draft previews. You can learn more about how Google uses information from sites that use its services.

Cookies

We use optional Google Analytics cookies only after you accept them. These include _ga and cookies whose names start with _ga_. Their configured lifetime is up to six months. We do not use advertising cookies.

We save your analytics choice in browser storage; that choice is valid for up to six months. You can accept or reject analytics, or withdraw a previous acceptance, through Cookie settings in the footer. Withdrawing consent stops further collection and removes Analytics cookies set by this website; it does not automatically erase information already collected.

Functional cookies or browser storage may also be used for editor sign-in and draft previews. You can manage or disable cookies and browser storage through your browser settings.

Your rights

Under the UK General Data Protection Regulation (GDPR), you have the following rights, depending on the circumstances:

• Access the personal information we hold about you
• Request corrections or updates to your information
• Request deletion of your data, where legally applicable
• Request restriction of processing or a portable copy of your information, where applicable
• Object to certain types of processing, including processing based on legitimate interests
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us at andrew@andrewgroves.com.

You also have the right to complain to the Information Commissioner’s Office (ICO).

Data retention

We keep personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law.

In deciding this, we consider whether an enquiry is ongoing or has led to a commission, the need to keep records of agreed work, and any applicable legal, accounting or claims-related requirements.

Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse, or disclosure.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last revised” date.

Contact

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact:

Andrew Groves
Email: andrew@andrewgroves.com

Andrew Groves is the data controller for the independent consultancy practice described in this policy.