Privacy Policy
Last updated: February 2026
1. Introduction
This Privacy Policy explains how Alan Tiller ("I", "me", "my"), a sole trader operating from the Isle of Wight, United Kingdom, collects, uses, stores, and protects your personal information when you use my website at alantiller.com (the "Website") and my services.
I am committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. By using this Website or my services, you agree to the collection and use of information in accordance with this policy.
2. Information I Collect
2.1 Information You Provide
I may collect personal information that you voluntarily provide to me, including:
- Contact Information: Name, email address, phone number, and postal address when you contact me or request my services.
- Business Information: Company name, website URL, and project requirements.
- Communication Data: Records of correspondence when you contact me via email, contact forms, or other means.
- Payment Information: Billing details necessary to process payments for my services (note: I do not store full payment card details).
2.2 Information Collected Automatically
When you visit my Website, I may automatically collect certain information, including:
- Technical Data: IP address, browser type and version, operating system, device type.
- Usage Data: Pages visited, time spent on pages, navigation paths, and referring websites.
- Cookie Data: Information collected through cookies and similar technologies (see my Cookie Policy for more details).
3. How I Use Your Information
I use the information I collect for the following purposes:
- To provide, operate, and maintain my services
- To respond to your enquiries and communicate with you
- To process payments and manage client accounts
- To send administrative information, such as project updates and invoices
- To improve my Website and services
- To comply with legal obligations
- To protect against fraudulent or unauthorised activity
4. Legal Basis for Processing (UK GDPR)
Under UK data protection law, I must have a lawful basis for processing your personal data. The legal bases I rely on include:
- Contractual Necessity: Processing necessary to perform a contract with you or take steps at your request before entering into a contract.
- Legitimate Interests: Processing necessary for my legitimate business interests, provided these do not override your rights.
- Legal Obligation: Processing necessary to comply with legal requirements.
- Consent: Where you have given clear consent for specific purposes.
5. Data Sharing and Third Parties
I do not sell, trade, or rent your personal information to third parties. I may share your information with:
- Service Providers: Third-party providers who assist me in operating my business, such as hosting providers, payment processors, and email services. These providers are contractually obligated to protect your information.
- Legal Requirements: When required by law, court order, or governmental authority.
- Business Transfers: In connection with any merger, sale of assets, or acquisition of all or a portion of my business.
6. Data Retention
I retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Client project data is typically retained for seven years after project completion for legal and tax purposes.
7. Data Security
I implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is completely secure, and I cannot guarantee absolute security.
8. Your Rights
Under UK data protection law, you have the following rights:
- Right of Access: Request a copy of the personal information I hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete information.
- Right to Erasure: Request deletion of your personal information in certain circumstances.
- Right to Restrict Processing: Request limitation of how I use your information.
- Right to Data Portability: Request transfer of your information to another party.
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact me at hello@alantiller.com. I will respond to your request within one month.
9. International Transfers
Your information may be transferred to and processed in countries outside the UK. Where this occurs, I ensure appropriate safeguards are in place to protect your information in accordance with UK data protection law.
10. Children's Privacy
My Website and services are not directed at individuals under the age of 18. I do not knowingly collect personal information from children. If you believe I have inadvertently collected information from a child, please contact me immediately.
11. Changes to This Privacy Policy
I may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. I encourage you to review this policy periodically.
12. Contact Me
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact me at:
Alan Tiller
Email: hello@alantiller.com
Location: Isle of Wight, United Kingdom
13. Complaints
If you are not satisfied with how I have handled your personal information, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:
Website: https://ico.org.uk
Helpline: 0303 123 1113