Privacy Policy

  • I collect the minimum needed to run the site, fight spam, reply to you, and improve content.
  • Analytics is optional and only runs with your consent.
  • I do not sell your data.
  • You can email me any time to use your rights: site@badcompost.co.uk.

1) Who I am

2) What I collect

  • Site usage data. Pages visited, links clicked, referrers, approximate location, device and browser information. Collected via cookies and analytics tools.
  • Contact and correspondence. Your name, email address, and message content when you contact me or submit forms.
  • Comments. Your name, email address, comment content, IP address and user agent when you post a comment.
  • Server and security logs. IP address and technical logs for reliability and security.

I do not intentionally collect special category data. Please avoid sharing it.

3) How I use your data and legal bases

  • Provide and secure the website. Operate hosting, prevent abuse, detect and fix issues. Legal basis. Legitimate interests.
  • Improve content and performance. Understand what is useful and improve user experience. Legal basis. Legitimate interests. Non-essential analytics only with consent under PECR.
  • Respond to enquiries and manage interactions. Reply to messages and process form submissions. Legal basis. Contract or legitimate interests. Consent where required.
  • Compliance and enforcement. Meet legal obligations and respond to lawful requests. Legal basis. Legal obligation.

I do not sell your data and I do not use it for automated decision making that produces legal or similarly significant effects.

4) Cookies

I use essential cookies that are necessary for core site functionality and security. I may use non‑essential analytics cookies to understand site usage.

  • Essential cookies. Do not require consent.
  • Analytics cookies. Disabled unless you consent. You can change your preferences at any time via [link to cookie settings].

You can also control cookies via your browser settings.

5) Analytics

If enabled with your consent, I use Google Analytics to measure traffic and performance.

  • Data processed. Page views, events, referrers, device and approximate location.
  • IP handling. Google Analytics 4 does not log or store full IP addresses.
  • Retention. You can withdraw consent at any time via cookie settings. Data is retained by Google according to configured retention periods.
  • Opt out. Use the cookie settings link or your browser tools.

Provider privacy notice: https://policies.google.com/privacy More on GA4 data practices: https://support.google.com/analytics/answer/12017362

6) Contact forms and email

When you submit a form or email me, I process your name, contact details and message to respond.

  • Forms. Handled by my WordPress site and sent to my email. Some submissions may be routed through a self‑hosted automation workflow operated by me to help process and organise enquiries.
  • Spam and abuse prevention. Form and comment submissions may be checked by a spam detection service as part of security and anti‑spam measures.
  • Retention. See section 10.

7) Comments

If you leave a comment, your comment, name and the time of posting will be public. Your email address is not published. I process your IP and user agent for security and spam prevention.

8) Service providers and processing locations

I use reputable service providers to host the site, deliver content, provide analytics, secure the site, and process enquiries. Providers only process data on my instructions and must keep it secure.

  • Hosting and infrastructure. UK‑based servers with a UK provider.
  • Content management. Self‑hosted WordPress.
  • Analytics. Google Analytics (with consent).
  • Spam protection. A third‑party spam detection service for comments and forms.
  • Automation. A self‑hosted automation platform I operate may process some form submissions and administrative workflows.

Some providers may process data outside the UK or EEA. Where this happens, I rely on lawful safeguards such as adequacy regulations or Standard Contractual Clauses. See each provider’s privacy notice for details.

9) How long I keep your data

  • Analytics. Retained according to Google Analytics settings or until you withdraw consent.
  • Enquiries. Typically up to 12 months after we last correspond, unless needed longer for ongoing matters.
  • Comments. Kept while the post is published or until you request deletion.
  • Logs and security data. Typically up to 90 days, unless required longer for investigation.

I keep data longer only if required by law or to establish or defend legal claims.

10) Your rights

Under UK data protection law, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with the UK Information Commissioner’s Office

To exercise your rights, email site@badcompost.co.uk. ICO: https://ico.org.uk/make-a-complaint/

11) Children

This site is intended for adults and business professionals. I do not knowingly collect data from children.

12) Security

I use reasonable technical and organisational measures to protect data. No method of transmission or storage is completely secure. Please take care when sharing information online.

13) Links to other sites

My content may link to other websites. Their privacy practices are their own. Please review their policies.

14) Changes to this policy

I may update this policy to reflect changes in law or how I operate the site. The latest version will always be on this page. Material changes will be highlighted for a reasonable period.