Loading...
Loading...
This notice explains how Lavery Digital collects and uses your personal data, and your rights under UK GDPR.
Last updated: June 2026
The data controller for this website is:
Glen Lavery, trading as Lavery Digital
Sole trader — United Kingdom
Email: glen@laverydigital.com
Website: laverydigital.com
As a sole trader, Glen Lavery is not required to register with the ICO under the current small organisation exemption, but processes data in compliance with UK GDPR and the Data Protection Act 2018.
| Data collected | Name, email address, company name (optional), message, budget range |
| Purpose | Responding to business enquiries submitted via the contact form |
| Lawful basis | Consent— Art. 6(1)(a) UK GDPR. You provide your details voluntarily when submitting the form. |
| Retention | 2 years from the date of submission, then securely deleted. |
| Data collected | Admin username, email address, session tokens |
| Purpose | Managing and publishing content via the Wagtail CMS — restricted to authorised staff only |
| Lawful basis | Legitimate interests— Art. 6(1)(f) UK GDPR. Necessary for the operation and maintenance of the website. |
| Retention | Duration of access, plus 30 days after account deactivation. |
| Data collected | Error logs, stack traces, IP address |
| Purpose | Identifying and resolving technical faults to maintain site reliability |
| Lawful basis | Legitimate interests— Art. 6(1)(f) UK GDPR. Maintaining the integrity and security of the website. |
| Retention | 90 days, after which logs are automatically purged. |
We use the following processors, each under a data processing agreement or standard contractual clauses. No data is sold or shared for marketing purposes.
Servers and object storage located in the London (lon1) data centre, United Kingdom.
Privacy policy →Email notifications for contact form submissions are routed via Amazon SES (London region).
Privacy policy →Application error logs and stack traces, used solely for debugging and reliability.
Privacy policy →The contact form uses Google reCAPTCHA to detect automated submissions. Google may process IP address and browser signals.
Privacy policy →You have the following rights in relation to personal data we hold about you:
| Right | What it means |
|---|---|
| Access (Art. 15) | Obtain a copy of the personal data we hold about you. |
| Rectification (Art. 16) | Have inaccurate data corrected without undue delay. |
| Erasure (Art. 17) | Request deletion of your data where there is no overriding legitimate reason to retain it. |
| Restriction (Art. 18) | Ask us to restrict processing in certain circumstances (e.g. while a dispute is resolved). |
| Portability (Art. 20) | Receive your data in a structured, machine-readable format where processing is based on consent. |
| Object (Art. 21) | Object to processing based on legitimate interests at any time. |
How to exercise your rights
Email glen@laverydigital.com with the subject line Data Request — [right type]. We will respond within one calendar month (Art. 12(3) UK GDPR).
Where processing is based on consent (contact form enquiries), you may withdraw your consent at any time by emailing glen@laverydigital.com. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the UK supervisory authority:
We would welcome the opportunity to address your concern directly before you approach the ICO, so please consider contacting us first.
We may update this notice from time to time. Material changes will be reflected in the “last updated” date at the top of this page. We encourage you to review this page periodically.
Questions?