Privacy Policy

Last updated: 17 September 2026

This website, andyelvis.com, is operated by Andy McGovern, a sole trader trading as andyelvis.com in the United Kingdom (“I”, “me”). I am the data controller for any personal information collected through this site. You can contact me about anything in this policy at hello@andyelvis.com.

What I collect and why

Enquiries. When you use the contact form or email me, I collect your name, email address, subject and message so that I can reply and, if we go on to work together, plan and deliver the work. Legal basis: taking steps at your request before entering a contract, and my legitimate interest in responding to enquiries.

Bookings and appointments. If you book a call or appointment through the site, I collect your name, contact details and the information you give about the booking. Legal basis: performance of a contract or steps taken at your request.

Clients. If you become a client I keep the information needed to deliver the work, invoice you and meet legal obligations, including contact details, project information and payment records. Legal basis: contract and legal obligation.

Analytics. This site is built on Squarespace, which collects standard technical information such as IP address, browser type, pages visited and referring website to provide the site and give me aggregated visitor statistics. Legal basis: legitimate interest in running and improving the site. See the Cookie Policy for details of the cookies used.

Embedded content. Pages may embed video players and an Instagram feed. Those services may set their own cookies and collect data when you interact with them, under their own privacy policies.

Who I share it with

I do not sell personal information. I share it only with services I use to run the business, which act on my behalf: Squarespace (website hosting and forms), Google Workspace (email), my accountant, and cloud storage and file-delivery services used to deliver work. Where a service processes data outside the UK, appropriate safeguards such as the UK Addendum to the EU Standard Contractual Clauses are in place. I may also share information where the law requires it.

How long I keep it

Enquiries that do not lead to work are deleted within 12 months. Client records are kept for six years after the end of the tax year in which the work was completed, as required for tax purposes. Footage and photographs delivered to clients are kept in line with the archive terms agreed in the client agreement.

Your rights

Under UK data protection law you have the right to access the personal information I hold about you, to have it corrected or deleted, to object to or restrict its processing, to data portability, and to withdraw consent where consent is the basis for processing. To exercise any of these rights email hello@andyelvis.com. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Children

This site is not aimed at children under 16 and I do not knowingly collect their data.

Changes

I may update this policy from time to time. The date at the top shows when it was last changed.