Privacy Policy
This policy explains what personal data Steve Blackmore collects, why I collect it, and how I protect it. It applies to all visitors to this website.
Last updated: 26 February 2026
Who I am
Steve Blackmore is a web developer based in Caterham, Surrey, CR3, UK. For the purposes of UK GDPR, I am the data controller for personal data collected through this website.
If you have any questions about this policy or how I handle your data, contact me via the contact form.
What data I collect
Contact form submissions
When you use the contact form on this site, I collect:
- Your name
- Your email address
- Your website URL (optional)
- The message you submit
- Your IP address (for spam prevention)
- The date and time of submission
Analytics and server logs
My web server records standard access logs including IP addresses, pages visited, browser type, and referring URL. These logs are used to diagnose technical issues and are not used to identify individual visitors.
Why I collect it and my legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, message | To respond to your enquiry | Legitimate interest / contract |
| IP address | Spam and abuse prevention | Legitimate interest |
| Server logs | Security and diagnostics | Legitimate interest |
How I store your data
Contact form submissions are delivered to me by email. They are not stored in a database. Email is held on a private mail server located in the EU, accessible only to me.
I do not sell your data. I do not use it for marketing without your consent.
How long I keep your data
Emails received via the contact form are retained for up to 2 years for business continuity purposes, then deleted. You may request earlier deletion at any time (see your rights below).
Third parties
This site does not use Google Analytics, Facebook Pixel, or any advertising trackers. No personal data is passed to third-party marketing platforms.
The site is served via Cloudflare, which processes request data as part of its CDN and DDoS protection service. Cloudflare acts as a data processor under a Data Processing Addendum.
Cookies
This site sets one cookie (cookie_ok) when you dismiss the cookie notice. It records that you have seen the notice and expires after 12 months. It contains no personal data and is not used for tracking or advertising. No other cookies are set by this site.
Your rights under UK GDPR
You have the right to:
- Access — request a copy of the personal data I hold about you
- Rectification — ask me to correct inaccurate data
- Erasure — ask me to delete your data
- Restriction — ask me to limit how I use your data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
To exercise any of these rights, contact me via the contact form. I will respond within 30 days.
If you are not satisfied with how I handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Changes to this policy
I may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. I will not retroactively reduce your rights without your consent.