Who I am
This privacy notice explains how Andrew Rimmer (“I”, “me”) collects and uses personal information through andrewrimmer.co.uk (the “Website”). I am the data controller for that information under the UK GDPR and the Data Protection Act 2018.
Personal information means information that could identify you — for example your name, email address, telephone number or IP address.
My principles
Privacy notices should be human readable, complete and easy to find.
Only the minimum information reasonably needed should be collected, and kept only for as long as it is needed.
Information you give me, or that is gathered when you use the Website, is never used for marketing or advertising, and never sold or passed to anyone else unless the law requires it.
Where the law allows, you should be told if I am ever required to hand your personal information to a third party.
What I collect
Email. The Website has no forms, accounts or newsletter. The only way it collects personal information directly is if you choose to email me — in which case I receive your email address, name and whatever you include in your message.
Server logs. Like almost every website, the server hosting this site (run by a third-party hosting provider) automatically records technical details of each request: your IP address, the date and time, the page requested, and your browser’s user-agent string.
How I use it, and why
Emails are used only to reply to you and, if we go on to work together, to deliver and administer that engagement. The lawful basis is my legitimate interest in responding to enquiries, or taking steps at your request before entering into a contract.
Server logs are used only to keep the Website secure and running — for example, to diagnose faults or investigate abuse. The lawful basis is my legitimate interest in operating a secure website. I do not link log data to anything you send me, and I do not use analytics or tracking of any kind.
Cookies and third-party content
The Website sets no cookies and uses no analytics, advertising or tracking scripts.
The Website loads its fonts, photographs and every other file from its own servers and nothing from other websites. (The photographs were originally published on Unsplash and are served from this site.)
Sharing your information
I do not sell, rent or voluntarily share your personal information. I may disclose it only where I believe in good faith that it is reasonably necessary to (a) act on suspected illegal activity; (b) comply with legal process, such as a court order; or (c) protect my rights or property, or those of others.
If I am required to provide your personal information to a third party, I will use reasonable means to tell you promptly, unless the law prevents it.
How long I keep it
Emails are kept only as long as needed to handle your enquiry, or for the duration of any engagement plus any period required for legal, tax or accounting purposes. Server logs are kept for up to 90 days and then deleted automatically.
Security
I take reasonable technical and organisational measures to protect the information I hold against unauthorised access and unlawful processing. No website can remove every risk, but if a breach affecting your information occurs I will notify you and the ICO where the law requires it.
Your rights
You have the right to ask for a copy of the personal information I hold about you, and to ask me to correct it, delete it, restrict how I use it, or object to my using it. To exercise any of these rights, email hello@andrewrimmer.co.uk.
If you are unhappy with how I have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk — though I would appreciate the chance to put things right first.
Other websites
The Website may link to other sites. This notice does not cover them; please read their own privacy policies.
Changes to this notice
I may update this notice from time to time, and will revise the effective date when I do. This version is effective from 14 October 2026.
Questions?
Email hello@andrewrimmer.co.uk.