PRIVACY POLICY

Privacy Policy

Last updated: 02 July 2026

This Privacy Policy explains how I (“I”, “we”, “me”, “my”) collect, use, and protect your personal data when you use littleoutandabout.com (“Website”).

I comply with the UK GDPR and the Data Protection Act 2018.

---

1. Who I Am

I operate this Website as an individual.

Contact: enquiries@littleoutandabout.com

I am the “data controller” responsible for your personal data.

---

2. Personal Data I Collect

2.1 Data You Provide

· Name

· Email address

· Contact details

· Comments or submissions

· Enquiry information

2.2 Data Collected Automatically

· IP address

· Browser type

· Device information

· Pages visited

· Cookies (see Cookie Policy)

2.3 Data from Third Parties

· Analytics providers (e.g., Google Analytics)

· Embedded service providers (e.g., video platforms)

---

3. How I Use Your Data

I use your data to:

· Operate and maintain the Website

· Respond to enquiries

· Improve Website performance

· Analyse usage and traffic

· Prevent misuse or security issues

· Comply with legal obligations

---

4. Legal Bases for Processing

Under UK GDPR, I rely on:

· Consent — optional cookies, marketing

· Contract — responding to enquiries

· Legitimate interests — analytics, security, functionality

· Legal obligation — compliance with law

---

5. Sharing Your Data

I may share your data with:

· Hosting providers

· Analytics services

· Professional advisers

· Regulators where required

I do not sell personal data.

---

6. International Transfers

If data is transferred outside the UK, I ensure safeguards such as:

· UK adequacy regulations

· Standard Contractual Clauses (SCCs)

---

7. Data Retention

I retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy. Different categories of data are retained for different periods:

Enquiry data (emails, contact form submissions): retained for 12 months after the enquiry is resolved.
User comments or submissions: retained indefinitely unless you request deletion, as they form part of the Website’s content.
Analytics data (e.g., Google Analytics): retained according to the default retention period of the analytics provider, typically 26 months, unless you withdraw consent.
Technical logs and security data: retained for up to 12 months for security, fraud‑prevention, and diagnostic purposes.
Email correspondence: retained for up to 24 months, unless required longer for legal reasons.

If legal obligations require longer retention (for example, fraud prevention or regulatory requirements), I may retain certain data for the period mandated by law.

When data is no longer required, it is securely deleted or anonymised.

---

8. Your Rights

You have the right to:

· Access your data

· Correct inaccurate data

· Request deletion

· Restrict processing

· Object to processing

· Withdraw consent

· Data portability

Contact: enquiries@littleoutandabout.com