Introduction
I am committed to protecting your privacy and handling your personal data responsibly and transparently, in accordance with applicable data protection laws including the UK General Data Protection Regulation (UK GDPR).
This website is hosted by Bluehost and built using WordPress, with additional plugins used to provide functionality, security, and analytics.
What Information I Collect
Information You Provide me
When you contact me through the forms on the website, I may collect:
- Your Name
- Your Email Address
- Your Phone Number (if provided)
- Infomation about your child (such as age, needs, or relevant details)
- Any other information you choose to include in your message
Comments
When visitors leave comments on blog posts on the site, I collect:
- The data shown in the comments form
- Your IP address
- Your browser user agent
This information is used to help detect and prevent spam.
An anonymised hash of your email address may be sent to the Gravatar service to check if you use it. After approval, your profile picture may be publicly visible alongside your comment.
Automatically Collected Information
Certain technical data may be collected automatically when you visit the website, including:
- IP address (temporarily, for security and anti-spam purposes)
- Browser type and device information
- Pages visited and interaction data
This is collected through security tools and analytics services.
How Your Information Is Used
Your personal data is only used for legitimate purposes, including:
- Responding to enquiries
- Understanding your requirements
- Providing appropriate services
- Maintaining website security and preventing spam or abuse
- Analysing website performance and improving user experience
Cookies
This website does not intentionally use cookies for tracking or advertising purposes.
However, some essential or third-party features may still place limited cookies, including:
- WordPress (for login sessions or comment convenience)
- Analytics tools
- Embedded content
Where cookies are used, they are minimal and for functionality or security purposes only.
Third-Party Services & Plugins
This website uses the following plugins and services, which may process limited data:
WPForms Lite
- Collects form submission data you provide
- Stores submissions securely within WordPress and email notifications
Akismet Anti-Spam
- Analyses comment data (including IP address and content) to detect spam
Wordfence Security
- Monitors traffic and logs IP addresses for security purposes
- Helps prevent malicious access and attacks
Google Analytics (via MonsterInsights)
- Collects anonymised usage data such as page visits, time on site, and interactions
- Does not personally identify you
Jetpack
- Provides security, performance, and analytics features
- May collect IP addresses and usage data for security and performance monitoring
OptinMonster
- May track interactions with forms or popups (if used)
- Used for improving engagement and communication
Yoast SEO
- Does not collect personal data from visitors
- Used purely for search engine optimisation
Bluehost
- As the hosting provider, Bluehost may log technical data (such as IP addresses) for server performance and security
Data Sharing
I do not sell or share your personal data with third parties for marketing purposes.
Data may be processed by trusted third-party services listed above, only where necessary for:
- Website functionality
- Security
- Analytics
All providers are expected to comply with relevant data protection regulations.
Data Retention
- Contact form data is kept only as long as necessary to respond to your enquiry or provide services
- Comments may be retained indefinitely to allow for moderation and follow-up discussions
- IP addresses collected for security are stored only for a limited period
Your Rights
Under data protection law, you have the right to:
- Request access to the personal data I hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing in certain circumstances
To exercise any of these rights, please get in touch using the contact details below.
Data Security
Appropriate technical and organisational measures are in place to protect your personal data, including:
- Secure hosting
- Security monitoring (Wordfence, Jetpack)
- Spam and abuse protection systems
Embedded Content
Pages on this site may include embedded content (such as videos or images).
Embedded content from other websites behaves as if you visited those websites directly.
These external sites may collect data, use cookies, and monitor your interaction.
Changes to This Policy
This Privacy Policy may be updated from time to time to reflect changes in legal requirements or website functionality.
Contact
If you have any questions about this Privacy Policy or your data, please contact me via the website contact page. To contact me about excercising any of the mentioned rights above, please contact me on legal@tinysmilesclub.com.