Last updated: 16 October 2026
This policy explains what personal data I collect when you use chaykelly.com or get in touch with me, what I do with it and the choices you have. I've kept it short and in plain English.
Who I Am
chaykelly.com is run by Chay Kelly Marketing Ltd, a company registered in England and Wales with company number 15740126.
Chay Kelly Marketing Ltd is the data controller for the personal data described here, which means I decide how and why it's used, and it is registered with the Information Commissioner's Office. In this policy, "I", "me" and "my" mean Chay Kelly Marketing Ltd.
If you have a question about your data, get in touch through the contact form.
What I Collect and Why
When You Send an Enquiry
The contact form asks for your name, email address, a subject and a message. I use these to reply to you and, if we decide to work together, to set up the project. If we don't go ahead straight away, I might send you an email once or twice afterwards to check in. Just reply and say if you'd rather I didn't.
My lawful basis is legitimate interests (answering the enquiry you sent me and following it up) or, where you're asking about working together, taking steps at your request before entering into a contract.
I don't add you to a mailing list, send you marketing emails or use your details for advertising.
The form is protected by Cloudflare Turnstile, which checks that a person rather than a bot is filling it in. To do that it looks at technical information about your browser and device. You can read how it works in Cloudflare's Turnstile privacy addendum.
When You Become a Client
If we work together, I keep the contact and billing details I need to deliver the work, send invoices and keep company and tax records. My lawful bases are the contract between us and my legal obligations.
When You Browse the Site
When you first visit, a banner asks whether you're happy for analytics to run. Nothing is loaded for analytics until you agree. If you do, I use Google Analytics 4 to see how people find and use the site, such as which pages are read and which links are clicked. It records information like your approximate location, device and browser type, and the pages you visit. Google Analytics doesn't tell me who you are, and I don't try to work that out.
My lawful basis for analytics is your consent. See the cookie policy for the full list of cookies and how to change your choice.
Like every website, the server and Cloudflare also log technical information such as your IP address and browser type to keep the site running and secure. My lawful basis is legitimate interests in protecting the site.
I don't use your data for automated decisions about you, and I don't sell it to anyone.
Who Else Handles Your Data
I use a small number of trusted providers to run the site and the business. They only process your data to provide their service to me:
- Hostinger hosts the website
- Cloudflare delivers the site, protects it from attacks, runs the cookie banner and runs Turnstile on the contact form
- Google provides my email (Google Workspace), and Google Analytics and Google Tag Manager if you agree to analytics
- InLinks adds structured data to some pages, which means its server sees your IP address when a page loads (it doesn't set cookies)
- My accountant sees client billing records so the company can meet its tax obligations
I may also share data if the law requires it, for example with HMRC.
Data Outside the UK
Some of these providers, including Google and Cloudflare, may process data in the United States or elsewhere outside the UK. Where they do, the transfer is covered by safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or the International Data Transfer Agreement approved by the ICO.
How Long I Keep It
- Enquiries that don't lead to work: two years from our last contact, then deleted
- Client records, including invoices: six years after the end of the financial year they relate to, as company and tax law requires
- Google Analytics data: 14 months, set in the GA4 data retention settings
How I Keep It Safe
The site runs over HTTPS, the contact form is protected against spam and bots, and my business accounts use strong passwords and two-factor authentication. Only I have access to enquiries and client records.
Your Rights
Under the UK GDPR and the Data Protection Act 2018 you have the right to:
- ask for a copy of the personal data I hold about you
- ask me to correct anything that's wrong or incomplete
- ask me to delete your data
- ask me to restrict how I use it
- object to me using it on the basis of legitimate interests
- withdraw your consent at any time, where consent is the basis
- ask for your data in a portable format
To use any of these, get in touch through the contact form. I'll reply within one month, and there's no charge.
If you're unhappy with how I've handled your data, please tell me first so I can put it right. You can also complain to the Information Commissioner's Office, the UK's data protection regulator.
Links to Other Sites
The site links to other websites, such as the sources I cite in my articles. Their own privacy policies apply once you leave chaykelly.com.
Changes to This Policy
I'll update this page when anything changes, such as a new tool on the site, and change the date at the top.