PRIVACY POLICY

davidbrisbourne.com is operated by David Brisbourne, an individual based in the United Kingdom.

davidbrisbourne.com is the data controller for any personal data collected through this Website. We are an individual operator based in the United Kingdom.

Contact: davidbrisbourne99@gmail.com

We do not currently meet the threshold for mandatory registration with the Information Commissioner's Office (ICO). We will review this if our data processing activities change significantly.

2.1 Data You Give Us Directly

We do not currently operate any contact forms, comment sections, or email sign-up forms. We do not actively collect any personal data from visitors.

If you choose to contact us directly by email, we will receive your email address and any information you include in your message. We use this solely to respond to you and delete it once the conversation is closed.

2.2 Data Collected Automatically

When you visit the Website, our hosting provider may automatically log certain technical data. This may include:

• Your IP address
• Browser type and version
• Pages visited and time of visit
• Referring website
• Device type

This data is collected at a server level by our hosting provider and is used for security and basic operational purposes. We do not use this data to identify individual visitors.

2.3 Analytics

We do not currently use any analytics tools. If we introduce analytics in the future, we will update this policy before doing so and will obtain your consent if any cookies are involved.

2.4 Donations via JustGiving

We do not collect, receive, or process any personal or financial data in connection with donations. Our Website links to a JustGiving fundraising page for Tourettes Action. All donation processing and data collection is handled exclusively by JustGiving under their own Privacy Policy at justgiving.com/privacy-policy.

We have no access to any data you submit to JustGiving. JustGiving is the independent data controller for all information you provide on their platform.

Where we do process personal data, we rely on the following lawful bases under UK GDPR:

• Legitimate Interests (Art. 6(1)(f)): Server-level logging for Website security and operation.
• Legitimate Interests (Art. 6(1)(f)): Responding to direct email enquiries.

We do not process any data on the basis of consent at this time. If this changes, we will update this policy accordingly.

Any personal data we hold is used only for the purpose it was collected:

• Server logs — to maintain Website security and diagnose technical issues
• Email correspondence — to respond to your message only

We do not use your data for marketing, profiling, or automated decision-making of any kind.

We do not sell, rent, or trade your personal data. Full stop.

The only third parties who may process data in connection with this Website are:

• Netlify, Inc. — our hosting provider, who processes server logs as part of operating the Website infrastructure.

JustGiving — who operates independently as a data controller for any donation-related data. We share no data with JustGiving and receive none from them.

We may disclose data if required by law, court order, or regulatory authority.

Our hosting provider, Netlify, Inc., is based in the United States. Netlify uses standard contractual clauses and equivalent safeguards, as set out in their Data Processing Agreement, to protect data transferred outside the UK.

JustGiving may transfer data internationally in accordance with their own privacy policy and applicable transfer mechanisms.

We retain personal data only for as long as necessary:

• Server logs — retained by our hosting provider in accordance with their own retention policy, typically 30–90 days
• Email correspondence — deleted within 12 months of the last message

We hold no donation data. That data is retained by JustGiving under their own policy.

You have the following rights over any personal data we hold about you:

• Right of access: Request a copy of data we hold about you.
• Right to rectification: Ask us to correct inaccurate data.
• Right to erasure: Ask us to delete your data, subject to legal obligations.
• Right to restrict processing: Ask us to pause processing in certain circumstances.
• Right to object: Object to processing based on legitimate interests.

To exercise any of these rights, contact us at davidbrisbourne99@gmail.com. We will respond within 30 days.

You have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

We take reasonable measures to protect any personal data we hold, including use of HTTPS encryption across the Website. In the event of a data breach likely to affect your rights and freedoms, we will notify the ICO within 72 hours as required by UK GDPR.

This Website is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has contacted us, please let us know and we will delete any data immediately.

This Website links to JustGiving. This Privacy Policy applies only to davidbrisbourne.com. We are not responsible for JustGiving's privacy practices and encourage you to read their policy before submitting any personal data on their platform.

We will update this policy as our Website evolves — particularly when we finalise our hosting provider or introduce any new features. We will always revise the "Last Updated" date above when changes are made.

For any questions about this Privacy Policy or your personal data: