Privacy Policy

Who I am

This site is run by Jack Willoughby, based in Northern Ireland, United Kingdom. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, I am the data controller for the personal data described on this page. You can reach me about anything here at hello@jackpwilloughby.com.

What this site collects

The site itself is a static website. It has no login, no comment system, no contact form and no newsletter form. Measurement scripts run only if you accept the cookie banner — decline and the site runs none, builds no profile of you, and tracks nothing.

Measurement, with your consent

If you accept the cookie banner, Google Analytics 4 measures which pages are visited (with IP addresses anonymised) , and the Meta Pixel records whether an advert led to your visit. The lawful basis is consent, which you can withdraw at any time on the cookie policy page. What each tool sets and for how long is listed there.

Personal data otherwise reaches me in exactly two ways:

1. Email you send me

If you email hello@jackpwilloughby.com — including via the links on this site — I receive your email address, your name if you include it, and whatever you write. I use this to reply to you and to carry on the conversation you started. The lawful basis is legitimate interests (responding to people who contact me), or, where the conversation leads to work, steps taken before entering a contract.

2. Hosting logs

Like every website, the servers this site runs on keep short-lived technical logs — IP address, browser type, the pages requested and when. The site is hosted by Netlify, which processes this data to serve the pages, keep the service secure and diagnose faults. The lawful basis is legitimate interests (running a website that works and is secure). Netlify's own practices are described in the Netlify privacy policy.

What this site does not do

• No measurement without consent — analytics and advertising scripts load only after you accept the banner, and never if you decline. See the cookie policy.
• No selling or renting of personal data — to anyone, ever.

Services that are linked from here, but are not this site

Some things I do live on other platforms. Each is its own service with its own privacy policy, and your relationship with it starts when you use it there — not by visiting this site.

• The newsletter runs on Substack. If you subscribe, Substack holds your email address and manages the sending; see the Substack privacy policy. Unsubscribing is a one-click link in any issue.
• Purchases from the shop are completed through an external payment provider (such as Stripe). Your payment details go to that provider, not to this site — I never see or store card numbers. The provider's privacy policy applies to the transaction; I receive what I need to deliver the product: your email address and a record of what you bought.
• Social links (X, LinkedIn, Instagram) take you to those platforms, which behave according to their own policies once you are there.

International transfers

Netlify and Substack are US companies, so the limited data they process may be transferred outside the UK. Both rely on recognised safeguards for such transfers — standard contractual clauses and, where applicable, the UK–US Data Bridge.

How long data is kept

• Email: I keep correspondence for as long as it stays relevant — an ongoing conversation, an active or prospective piece of work, or a record I may reasonably need. If you'd like a thread deleted, ask.
• Hosting logs: retained briefly by Netlify on a rolling basis and then deleted; I don't keep separate copies.
• Purchase records: kept for as long as UK tax law requires (currently six years).

Your rights

Under UK GDPR you can ask me, at any time and for free, to:

• tell you what personal data I hold about you, and give you a copy (access);
• correct anything inaccurate (rectification);
• delete what I hold (erasure);
• limit what I do with it (restriction);
• hand it over in a usable format (portability);
• stop processing based on legitimate interests (objection).

Email hello@jackpwilloughby.com and I'll respond within a month. If you're not happy with how I handle it, you have the right to complain to the UK regulator, the Information Commissioner's Office — though I'd appreciate the chance to fix it first.

Children

This site is written for adults working in and around marketing. It is not directed at children and collects no data about anyone's age.

Changes to this policy

If the site changes in a way that affects your data — say analytics is added, or the shop starts taking payment on-site — this page will be updated first and the date at the top will change. The current version always lives at this URL.