Privacy Policy

My details

This website is operated by Phillip Whitehead. This website is operated as a personal site for the purposes of showcasing my work and experience and is entirely non-commercial.

You can contact me using the contact form on this site.

What type of information I collect

I currently collect and process the following information:

• Personal identifiers, contacts and characteristics (for example, name and contact details)

How I get the information and why I have it

All of the personal information I process is provided to me directly by you for one of the following reasons:

• Contacting me using my webform

I am exempt from the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA) as processing is carried out by an individual purely for personal activities, however your privacy and data security is important to me, and therefore I intend to process your data in a manner compliant with this legislation regardless.

The lawful GDPR basis relied on for processing this information is:

(a) Your consent. You are able to remove your consent at any time. You can do this by contacting me using the contact form on this site.

What I do with the information I have

I use the information that you have given me in order to reply your emails. If you give your  explicit consent, I will also use your information to reach out to you in the future.

I will not share this information unless required to do so by law.

How I store your information

Your information is securely stored on phillipwhitehead.co.uk, and on encrypted hardware controlled by me.

I keep names, email addresses and messages for 1 year from the last communication you have sent to me. I will then delete your information by deleting the records from this website and any emails on servers and devices under my control. Your data may be further retained in backups for up to 3 months. If it is necessary to restore these backups, your data will be deleted again upon restoration.

Your data protection rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask for copies of your personal information.

Your right to rectification – You have the right to ask that information you think is inaccurate is rectified. You also have the right to ask that information you think is incomplete is completed.

Your right to erasure – You have the right to ask that your personal information be erased in certain circumstances.

Your right to restriction of processing – You have the right to ask that the processing of your information be restricted in certain circumstances.

Your right to object to processing – You have the the right to object to the processing of your personal data in certain circumstances.

Your right to data portability – You have the right to ask that the information you give is transferred to another organisation, or to you, in certain circumstances.

I am exempt from the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA) as processing is carried out by an individual purely for personal activities, however your privacy and data security is important to me, and therefore I intend to process your data in a manner compliant with this legislation regardless.

I will not charge you to comply with a request made in line with your legal rights. If you make a request, I will respond to you within one calendar month.

Please contact me using the contact form on this site if you wish to make a request.

How to complain

As an individual processing data purely for personal activities, it is unlikely that the Information Commissioners Office (ICO) will be able to provide assistance, but if you feel that my processing of your data is or becomes non-exempt then you can complain to the ICO if you are unhappy with how I have used your data.

The ICO can be contacted at: