PRIVACY POLICY

Last updated: 10 January 2026

At jack-nisbet.co.uk, your privacy is important to me. This Privacy Policy explains how your personal information is collected, used, and protected when you visit or interact with this website.

1. Who I am

For the purposes of the UK General Data Protection Regulation (UK GDPR), the data controller is:

Jack Nisbet
United Kingdom
Email: hello@jack-nisbet.co.uk

2. Information I collect

a) Information collected automatically

When you visit this website, certain information is collected automatically through Squarespace Analytics, including:

  • Browser type and version

  • Device and operating system

  • IP address

  • Pages visited before and during your visit

  • Time and date of visits

  • Interactions such as clicks, scrolling, internal links, and searches

This information helps me understand how visitors use the site and improve its performance. Squarespace needs the data to run this website, and to protect and improve its platform and services. You can read more about how Squarespace uses your data (site usage information of end users) for its own purposes in their Privacy Policy.

b) Information you provide via forms

When you submit a contact form, I collect the information you provide, which may include:

  • Your name

  • Your email address

  • Any message or enquiry you submit

This information is used only to respond to your enquiry.

c) Invoicing and payment information

If you request or make a payment through this website, I may collect:

  • Name

  • Email address

  • Invoice details (such as services provided and amounts)

  • Payment history

Payment card details are never stored by me.

Payments are processed securely through Squarespace Payments, which uses trusted third-party providers.

3. How your information is used

Your personal information is used to:

  • Respond to enquiries submitted through the contact form

  • Provide services and issue invoices

  • Process payments securely

  • Monitor website traffic and improve site performance

  • Maintain accurate business and financial records

4. Legal basis for processing

Under UK GDPR, I rely on the following lawful bases to process your data:

  • Legitimate interests – to operate and improve the website and respond to enquiries

  • Contractual necessity – to provide services, issue invoices, and take payments

  • Legal obligation – to retain financial records for tax and accounting purposes

5. Third-party services

This website uses the following third-party services, which may process your personal data:

  • Squarespace – website hosting, analytics, forms, and invoicing

  • Stripe – payment processing

  • Sift – fraud detection and prevention

These providers process personal data in accordance with their own privacy policies and applicable data protection laws.

6. International data transfers

Some of the third-party services used (such as Squarespace and Stripe) may process data outside the UK. Where this occurs, appropriate safeguards are in place, such as standard contractual clauses approved under UK GDPR.

7. Cookies and analytics

This website uses cookies and similar technologies for analytics and functionality purposes. Non-essential cookies may be used to understand how visitors interact with the site.

You can control or disable cookies through your browser settings. Please note that disabling cookies may affect how the website functions.

8. How long your data is kept

  • Contact form submissions are retained only for as long as necessary to respond to enquiries

  • Invoice and payment records are retained for up to 6 years to comply with UK tax and accounting requirements

  • Analytics data is retained in accordance with Squarespace’s data retention policies

9. Your data protection rights

Under UK GDPR, you have the right to:

  • Request access to your personal data

  • Request correction of inaccurate data

  • Request deletion of your personal data

  • Request restriction of processing

  • Object to how your data is processed

  • Request data portability (where applicable)

To exercise any of these rights, please contact me at hello@jack-nisbet.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled improperly.

10. Changes to this policy

This Privacy Policy may be updated from time to time. Any changes will be posted on this page with an updated revision date.