Privacy Policy

1. Who we are

This website (stevematthews.me) is operated by W2CL Ltd, a company registered in England & Wales (company number [TO BE ADDED]) with its registered office at [REGISTERED ADDRESS — TO BE ADDED], Cardiff. W2CL Ltd is the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

2. What data we collect

We collect information you voluntarily provide via our forms — typically your name, email address, and message content. We use privacy-friendly Plausible Analytics, which does not use cookies and does not collect personal data.

3. How we use your data

We use your information to respond to enquiries, send the resources you've requested, and (with your consent) send occasional newsletter updates. You can unsubscribe at any time.

4. Lawful basis

We process your data on the basis of legitimate interests (responding to enquiries) or consent (newsletter signups).

5. Sharing & storage

Form submissions are stored securely in services we use to operate the business. We do not sell your data. We may use trusted processors (e.g. email and scheduling tools) to deliver our services.

6. Your rights

Under UK GDPR you have rights of access, rectification, erasure, restriction, portability, and objection. To exercise any of these, email hello@stevematthews.me.

7. Complaints

You can complain to the Information Commissioner's Office (ICO) at ico.org.uk if you are unhappy with how we have handled your data.

[This is a template for review by Steve's solicitor before publication.]