Privacy Policy
Effective Date: January 2026 | Last Updated: 14 January 2026
1. Introduction
Henry Goff ("I", "me", "my") is committed to protecting your privacy. This Privacy Policy explains how I collect, use, and protect your personal information when you visit henrygoff.com (the "Website").
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information I Collect
2.1 Information Collected Automatically
When you visit this Website, I may automatically collect:
- IP Address: Your Internet Protocol address, which may indicate your approximate geographic location
- Browser Information: Including browser type, version, and user agent string
- Device Information: Operating system and device type
- Access Timestamps: The date and time of each visit
- Pages Viewed: Which pages you accessed on the Website
- Referral Source: How you arrived at the Website
2.2 Information You Provide
If you contact me through the Website or via email, I may collect:
- Your name
- Your email address
- Any other information you choose to provide in your message
2.3 Analytics
This Website may use privacy-respecting analytics to understand how visitors use the site. No personally identifiable information is shared with third parties for marketing purposes.
3. How I Use Your Information
I use the information collected for the following purposes:
| Purpose | Legal Basis |
|---|---|
| To operate and maintain the Website | Legitimate Interest |
| To respond to your enquiries | Legitimate Interest / Consent |
| To understand how visitors use the Website | Legitimate Interest |
| To improve the Website and user experience | Legitimate Interest |
| To comply with legal obligations | Legal Obligation |
4. Data Sharing
I do not sell, rent, or trade your personal data to any third parties.
I may share your data with:
- Hosting providers: Who process data on my behalf to deliver the Website
- Professional advisers: If required for legal or accounting purposes
- Legal authorities: If required by law or to protect my rights
5. Data Retention
I retain personal data only for as long as necessary:
- Analytics data: Retained for up to 12 months
- Contact enquiries: Retained for up to 3 years or until the purpose is fulfilled
- Legal records: Retained as required by applicable law
6. International Transfers
Your data may be processed in countries outside the United Kingdom. Where this occurs, I ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
7. Cookies
This Website may use essential cookies to ensure proper functionality. These cookies do not track you for advertising purposes.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| Session cookies | Website functionality | Session | Essential |
By using this Website, you consent to the use of essential cookies.
8. Your Rights
Under the UK GDPR, you have the following rights:
8.1 Right of Access
You can request a copy of the personal data I hold about you.
8.2 Right to Rectification
You can request correction of any inaccurate personal data.
8.3 Right to Erasure
You can request deletion of your personal data in certain circumstances.
8.4 Right to Restriction of Processing
You can request that I restrict the processing of your personal data.
8.5 Right to Data Portability
You can request your data in a structured, commonly used format.
8.6 Right to Object
You can object to processing based on legitimate interests.
8.7 How to Exercise Your Rights
To exercise any of these rights, contact me at:
Email: henry@tollitt.com
I will respond within one month and may ask you to verify your identity.
8.8 Right to Complain
If you are unhappy with how I have handled your data, you can lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Telephone: 0303 123 1113
9. Security
I implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit (HTTPS/TLS)
- Secure hosting infrastructure
- Regular review of security practices
- Limited access to personal data
10. Third-Party Links
This Website may contain links to external sites. I am not responsible for the privacy practices of those sites. Please review their privacy policies before providing any personal information.
11. Changes to This Policy
I may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.
12. Contact
If you have any questions about this Privacy Policy or my data practices, please contact:
Henry Goff
Email: henry@tollitt.com
By using this Website, you acknowledge that you have read and understood this Privacy Policy.