Privacy Policy

This privacy policy explains how Michael Pilgram ("we", "us", or "our") collects, uses, and protects your personal data when you visit michaelpilgram.co.uk (the "Site"). We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Michael Pilgram is the data controller responsible for your personal data. If you have any questions about this privacy policy or our data practices, please contact us at: hello@michaelpilgram.co.uk

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us, including:

• Email Newsletter: When you subscribe to our newsletter, we collect your email address and optionally your name. This is processed through Kit (ConvertKit).

2.2 Automatically Collected Information

When you visit our Site, we automatically collect certain information about your device and browsing behavior:

• Vercel Analytics: We use Vercel Analytics (cookieless) to collect anonymized page view data and performance metrics. This does not require consent as it collects no personal data and uses no cookies.
• Google Analytics 4: With your consent, we use Google Analytics 4 to collect information about how visitors use our Site, including pages visited, time spent, browser type, device type, and referring website.
• Technical Data: IP address (anonymized), browser type and version, time zone setting, operating system, and device information.

3. How We Use Your Information

We use your personal data for the following purposes:

• Email Newsletter: To send you blog updates and relevant content you've subscribed to (lawful basis: consent).
• Performance Analytics: Vercel Analytics collects anonymized performance and usage data to improve site performance and user experience (lawful basis: legitimate interests, no consent required as no personal data is collected).
• Detailed Analytics: Google Analytics 4 provides detailed insights about how visitors use our Site (lawful basis: consent via Consent Mode v2).
• Site Functionality: To ensure the Site functions properly and securely (lawful basis: legitimate interests).

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Site. You can manage your cookie preferences at any time using our Cookie Settings.

4.1 Types of Cookies We Use

5. Third-Party Services

We use the following third-party services that may collect and process your data:

6. Data Retention

• Newsletter Subscriptions: We retain your email address until you unsubscribe.
• Analytics Data: Google Analytics retains data for 26 months by default, after which it is automatically deleted.
• Cookie Consent: Your cookie preferences are stored locally in your browser and persist until you clear them or change your preferences.

7. Your Rights Under GDPR

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate data.
• Right to Erasure: You can request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request your data in a machine-readable format.
• Right to Object: You can object to processing based on legitimate interests.
• Right to Withdraw Consent: You can withdraw consent at any time where we rely on consent (e.g., newsletter, cookies).

To exercise any of these rights, please contact us at hello@michaelpilgram.co.uk

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Some of our third-party service providers (Vercel, Google Analytics, Kit) may process data outside the UK/EEA. We ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data in accordance with UK GDPR requirements.

10. Children's Privacy

Our Site is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

Email: hello@michaelpilgram.co.uk

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).