Privacy Policy

This site’s Data Protection Policy

This website and its owners take a proactive approach to user privacy and ensure the necessary steps are taken to protect the privacy of its users throughout their visiting experience. This website complies with all UK national laws and requirements for user privacy.

This site is aimed at a UK audience. Restrictions may be enforced to limit external access, and if circumvented by the use of VPNs or Proxy services, those visitors will be treated as UK visitors and subject to UK law.


Notice:

I am committed to safeguarding your privacy. If you have any questions or problems regarding the use of your Personal Data and I will gladly assist you using the following email address:

Email:

By using this site or/and my services, you consent to the Processing of your Personal Data as described in this Privacy Policy.

This Privacy Policy is a part of My Terms and Conditions; by agreeing to the Terms and Conditions you also agree to this Policy. In the event of a collision of terms used in Terms and Conditions and Privacy Policy, the latter shall prevail.

Personal Data – any information relating to an identified or identifiable natural person.
Processing – any operation or set of operations that is performed on Personal Data or sets of Personal Data.
Data subject – a natural person whose Personal Data is being Processed.
Child – a natural person under 13 years of age.
Me/I  (either capitalized or not) – DaveIW.co.uk, DaveIW.uk, 13.40.2.59/, Dave Richardson


Data Protection Principles

I promise to follow the following data protection principles:

  • Processing is lawful, fair, transparent. My Processing activities have lawful grounds. I always consider your rights before Processing Personal Data. I will provide you with information regarding Processing upon request.
  • Processing is limited to its purpose. My Processing activities fit the purpose for which Personal Data was gathered.
  • Processing is done with minimal data. I only gather and process the minimal amount of Personal Data required for any purpose.
  • Processing is limited with a time period. I will not store your personal data for longer than needed.
  • I will do my best to ensure the accuracy of the data
  • I will do my best to ensure the integrity and confidentiality of data.

Data Subject’s rights

The Data Subject has the following rights:

  1. Right to information – meaning you have the right to know whether your Personal Data is being processed; what data is gathered, from where it is obtained and why and by whom it is processed.
  2. Right to access – meaning you have the right to access the data collected from/about you. This includes your right to request and obtain a copy of your Personal Data gathered.
  3. Right to rectification – meaning you have the right to request rectification or erasure of your Personal Data that is inaccurate or incomplete.
  4. Right to erasure – meaning in certain circumstances you can request for your Personal Data to be erased from my records.
  5. Right to restrict processing – meaning where certain conditions apply, you have the right to restrict the Processing of your Personal Data.
  6. Right to object to processing – meaning in certain cases you have the right to object to processing of your Personal Data, for example in the case of direct marketing.
  7. Right to object to automated Processing – meaning you have the right to object to automated Processing, including profiling; and not to be subject to a decision based solely on automated Processing. This right you can exercise whenever there is an outcome of the profiling that produces legal effects concerning or significantly affecting you.
  8. Right to data portability – you have the right to obtain your Personal Data in a machine-readable format or if it is feasible, as a direct transfer from one processor to another.
  9. Right to complain – if I refuse your request under the Rights of Access, I will provide you with a reason as to why. If you are not satisfied with the way your request has been handled, please contact me.
  10. Right for the help of supervisory authority – meaning you have the right for the help of a supervisory authority and the right for other legal remedies such as claiming damages.
  11. Right to withdraw consent – you have the right to withdraw any given consent for the Processing of your Personal Data.

How I Secure Your Data

I take extensive measures to protect your personal data. This includes using secure communication protocols such as HTTPS for data transfer. Where applicable, I employ anonymisation and pseudonymisation techniques to safeguard your information. Additionally, I actively monitor my systems for any vulnerabilities or potential attacks.

While I strive to ensure the highest level of security, I cannot guarantee the absolute safety of your data. However, I am committed to promptly notifying the appropriate authorities in the event of a data breach. If your rights or interests are at risk, I will also inform you directly. I will make every reasonable effort to prevent security breaches and fully cooperate with authorities should any incident occur.

If you have an account with me, please remember to keep your username and password confidential to further protect your data.


Children’s Data

I do not collect, nor do I intentionally seek to collect, information from children. My services are not directed towards children, and I do not target them. If it is discovered that an account or data belongs to a child, the account and associated information will be promptly removed.


Cookies and other technologies I use

I use cookies and/or similar technologies to analyse customer behaviour, administer the website, track users’ movements, and to collect information about users. This is done to personalise and enhance your experience with this site.

Please see further down for cookie information.


Who am I?

I’m Dave Richardson, a seasoned IT professional with extensive experience in both the education and public sectors. From 1993 to 2019, I worked as an IT Manager in the education sector in the United Kingdom, ensuring seamless technology operations in academic environments.

In 2019, I transitioned into the tourism industry as a Reunions Tour Representative, combining my organisational skills with a passion for travel and event coordination.

Returning to the IT field, I joined the Local Council as a Desktop Support Officer before advancing to Senior ICT Desktop Support Officer. Today, I lead the Desktop Support Team within the ICT Department, overseeing operations and ensuring efficient technical support across the organisation.

My website address is https://cv.daverichardson.uk


The Basis of This Site

This website is primarily dedicated to showcasing highlights from my professional career, along with a glimpse into my personal life.

By default, this site does not require users to log in or register for membership. As such, it is not expected to collect any data from visitors, except when submissions are made through the “Contact Me” page.


Data Location

I prioritise keeping this site’s data within the UK. Only UK-based data centres are used to host this site when switching providers.

Email services are also based in the UK; however, please note that emails may traverse the internet globally.

The website, including the engine, disk, and snapshots, is hosted on Amazon’s AWS Platform in the Europe-West2region (London), spanning across the A, B, and C zones.


Data this site collects:

Activity Data:

This website tracks visitor activity to understand user preferences and enhance security. Monitoring interactions helps identify popular content and detect any misuse, whether intentional or automated. By analysing visitor behaviour, we can refine the site’s design and functionality to improve the overall user experience.

To achieve this, the site collects the following data:

  • Username
  • Location of ISP
  • Page accessed
  • Referring page
  • Date/Time of activity
  • Hostname
  • Browser type and version
  • Device type and version
  • Operating System type and version

See the retention section for data removal periods.

Through Searching:
  • Your IP address
  • Your Username (if logged in)
  • Your browser agent
  • Your search query
Through payment of membership (if applicable):
  • The last 4 digits of the card used
  • the expiry date of the card used
  • Card details are passed to the payment gateway (Stripe)

This information will be stored in the site’s database for 90 days and is used to help better understand the end-user expectations of this site, and maintain IP information for security & tracking purposes.

Use of Cookies:

Cookie Policy

This website uses cookies to enhance user experience, such as storing display preferences. Where applicable, a cookie control system is in place, allowing users to accept or decline cookies upon their first visit. This ensures compliance with legal requirements for obtaining explicit user consent before storing or accessing cookie data on their device.

What Are Cookies?

Cookies are small files stored on a user’s device that track, save, and store information about interactions with the website. This enables the site to provide a more personalised browsing experience.

Managing Cookies

Users who wish to disable cookies can do so by adjusting their web browser’s security settings to block all cookies from this site and any external service providers.

Cookies and User Interaction

If you have an account and log in, the site will create a temporary cookie to check if your browser accepts cookies. This file contains no personal data and is automatically deleted when you close your browser.

If you leave a comment, you may opt in to save your name, email address, and website in cookies. This is for convenience, allowing you to avoid re-entering details for future comments. These cookies remain active for one year.

Please visit our dedicated Cookie Page for a list of cookies.


Firewall data:

To protect the site from abuse or attack, either by end-user or automated services such as “bots”, and also to log for evidence regarding activity in the event of abuse, the following information is collected and automatically checked against known threat sources:

  • Date
  • Time
  • IP Address
  • Threat Level
  • Rule Threat Match
  • Data requested, GET/POST
  • Data requested – the file being accessed for that request
  • The End User Agent descriptor
  • The End User Operating System descriptor

See the retention section for data removal periods.


Blocking data:

Geographic Access and Content Protection

To restrict and safeguard content for a UK audience, this site collects visitor location data and may deny access where applicable. This also helps minimise unnecessary egress data charges.

Visitor IP addresses are checked against multiple sources to determine location and enforce access restrictions accordingly.

  • Date
  • Time
  • IP Address
  • Country

See the retention section for data removal periods.


Google Analytics:

Use of Google Analytics

This site uses Google Analytics to collect statistical data and analyse visitor interactions. All data is securely stored on Google’s servers.

To track browsing activity across sessions, Google Analytics places a cookie (a small text file) on your device. If you prefer not to be tracked, you can disable cookies in your web browser settings (refer to your browser’s help guide for instructions). For further details on Google Analytics and the Google Analytics privacy policy, please visit the Google Analytics web site.

Google Analytics collects the following information:

Demographics: Age.
Gender.
Geographics: Language.
Location.
Behaviours: New visitors.
Returning visitors.
Frequency and recency.
Engagement.
Duration.
Views.
User Flow.
Technologies: Browser.
Operating System.
Network (provider).
Device category.
Acquisitions: How you got here.
Where you went.
 
Through Membership (if applicable):

In addition to the above; the following information is also collected:

  • Your email address
  • Your username <for this site>
  • Your First name (if given)
  • Your Lastname (if given)
  • Your profile picture (if uploaded)
  • Your own website or a nominated website (if given)
  • Your AIM (if given)
  • Your Yahoo IM (if given)
  • Your Jabba or Google Talk username (if given)
  • Your biographical information (if given)
  • Your password for this site
  • Your movement and activity on this site
  • If paid – The last 4 digits of the card used
  • If paid – the expiry date of the card used
User Participation and Data Collection

If you engage with this site by leaving comments or uploading content, additional data may be collected, including:

  • Comment text
  • Attachments (e.g., images)
  • Links

When visitors submit comments, the site collects the data entered in the comment form, along with the visitor’s IP address and browser user agent string to assist with spam detection.


Gravatar Integration

An anonymised hash of your email address may be sent to the Gravatar service to check if you have a profile. If approved, your profile picture will be publicly visible alongside your comment.

Image Uploads and Location Data

If you upload images, avoid including embedded location data (EXIF GPS). Visitors to the site may be able to download and extract location data from uploaded images.

Newsletter & Email Communications

If you have subscribed to the newsletter, created a membership account, or made a purchase on this site, you may receive emails related to these services.

Emails are sent only if you have opted in or if they relate to services provided to you. To deliver emails, this site collects:

  • Your name and email address (as provided during sign-up)
  • Your IP address (to prevent system abuse)

Email Tracking & Unsubscribing

This website uses the MailPoet sending service, which tracks email opens and link clicks to improve newsletter content. Outside of this website, no identifiable information is tracked except for the email address.

To unsubscribe, use the cancellation link included at the bottom of each email.


Membership & Data Collection (if applicable)

At checkout, the site collects:

  • Name
  • Email address
  • Username and password

This information is used to set up your account. If redirected to an offsite payment gateway, your details may be temporarily stored in a session variable to finalise account setup upon your return.

When logged in, cookies track certain activities, such as logins, visits, and page views.


How Your Data Is Used

The data collected on this site is used to:

  • Manage your account and site access
  • Track usage for auditing and security purposes
  • Plan future site improvements based on visitor behaviour
  • Identify and promote popular content, while assessing less popular content
  • Measure the effectiveness of marketing campaigns
  • Analyse peak site traffic periods to schedule maintenance efficiently
  • Send email notifications about new or updated posts, comments, pages, newsletters, and service updates

Use of Participation Data

Data collected through user participation (e.g., comments, pages, and posts) is essential for facilitating information sharing on this site.

Additionally, any submitted information may be used to:

  • Provide further details about products or services
  • Assist with queries related to the site’s content

For security, visitor comments may be processed through an automated spam detection service.


Cancelling or Expiring Your Account

If you no longer wish to use this site, you can cancel your account by:

  1. Logging in to your account
  2. Navigating to Accounts
  3. Under “My Memberships” and “Level,” selecting “Cancel”
  4. Confirming your cancellation

Once cancelled, your account will be marked for deletion.

What Happens When You Cancel?

  • Your account and membership will be removed from the site’s database within 30 days. However, backups may be retained according to the site’s data retention policy (see below).
  • You will lose access to all membership-required content.
  • No refunds are provided for unused or partially used membership payment cycles.
  • Any posts and comments you have made will be anonymised, but your IP address will be retained for legal compliance.

What Happens When Your Account Expires?

If you allow your membership to expire without cancellation:

  • Your account will be deleted from the site’s database within 30 to 90 days, though backups may remain in accordance with the retention policy.
  • Access to membership-required content will be revoked.
  • Any posts and comments will be anonymised, but your IP address will be retained for legal reasons.
  • Until deletion is complete, you may still receive service messages related to your account, subscriptions, or notifications you opted into.

Managing Your Data

If you do not have a membership account but wish to download or delete your data, visit the Data Protection Tools page.

To unsubscribe from newsletters, use the cancellation link at the bottom of any email.

If you have an account or have left comments, you can request an exported file containing your personal data.

You can also request that your personal data be deleted, except for any information that must be retained for administrative, legal, or security purposes.


Data Retention

Database, Files & Server Backups

As part of the site’s Data Recovery Plan, information is stored and backed up as follows:

  • Site Internal Backups:
    • Database: Daily backups, retaining the last 30 days (automated process)
    • Files: Weekly backups, retaining the last 8 weeks (automated process)
  • Server Backups:
    • Disk Images: Daily, retained for 14 days (automated process)

Backups are regularly tested, and any restored data is deleted immediately after successful confirmation.


Firewall Logs

Firewall logs are retained for either the last 50,000 entries or 30 days, ensuring sufficient time to investigate persistent attacks or abuse, which may be reported to law enforcement if necessary.


Blocking Logs

Blocking logs are retained for 30 days to help investigate potential abuse and prevent excessive data charges.


Email Logs

Email logs, including details of sent emails such as:

  • Date and time
  • Recipient’s email address
  • Subject
  • Content
  • Attachments

These are retained for 6 months. Emails are sent securely via TLS to an SMTP account based in the UK. The emails are not stored in the sent box.


Activity Logs

Activity logs are retained for 90 days or a maximum of 50,000 records, whichever comes first. This provides sufficient data to track guest usage, identify abuse, and inform appropriate site changes. These logs may also be used for law enforcement if necessary.


Google Analytics

User and event data is retained for 26 months starting from May 25, 2018. Google Analytics will automatically delete data older than this retention period, but aggregated data reports remain unaffected. The site owner retains this period to compare trends and assess content functionality.


Comments

  • Comments and their metadata are retained indefinitely to automatically approve follow-up comments without holding them in moderation.
  • For registered users, personal information provided in their profiles is stored. Users can view, edit, or delete their information at any time (except their username). Administrators can also view and edit this data.

IP Denial Logs

  • IP Location/Country data used for blocking access is retained for 7 days.

Cloudflare

Our website uses Cloudflare, a leading content delivery network (CDN) and internet security service. This integration ensures that visitors experience faster load times, improved site reliability, and enhanced protection against threats such as DDoS attacks.

How Cloudflare Interacts with Your Data

When you access our website, your request is routed through Cloudflare’s infrastructure. This allows Cloudflare to cache website content and deliver it from the closest data centre, thereby improving speed and resilience.

In doing so, the following data may be collected by Cloudflare:

  • IP Address: Used for routing, security filtering, and threat detection.
  • System Configuration Information: Including browser type, operating system, and device type, for optimisation and security.
  • Request and Performance Data: Time of access, page requested, and site performance metrics.
  • Threat and Security Data: Information related to potential malicious behaviour, such as unusual traffic patterns or automated access.

Cloudflare does not access the personal data you submit through forms on this site – such as names, email addresses, or payment information – unless this data is present in URLs, headers, or other elements of the web request.

Cloudflare operates under strict data protection regulations, including GDPR, and acts as a data processor in this context. They have committed to handling all data in accordance with applicable privacy laws. You can read more about their practices in the Cloudflare Privacy Policy.

Purpose of Data Collection

The data Cloudflare collects is used solely for the following purposes:

  • Site performance optimisation
  • Security and threat mitigation
  • Error and anomaly detection
  • Ensuring lawful use of site resources

Retention and Storage

Cloudflare retains logs and diagnostic data for short durations, typically up to 7 days, unless longer retention is necessary to investigate abuse or technical issues. All data is processed within Cloudflare’s global infrastructure, with safeguards in place to maintain compliance with UK and EU privacy laws.

Opting Out

As Cloudflare is essential for the core functioning and security of this website, there is no mechanism for users to opt out of this service without impacting the site’s performance and safety. However, no personal data submitted through forms or user accounts is intentionally processed by Cloudflare.


Final Statement on Data Retention

Data will be retained for the specified periods outlined in the policy, and once the retention period has expired, the data will be deleted from active logs and backups. However, because backup systems may store copies for additional time, it may take longer for data to be completely removed from all storage systems.

The minimum time period before any data removed will disappear from logs or backup history is 30 days, which corresponds to the longest retention period (for blocking logs). This ensures that any data removed from active logs or backups will be inaccessible for at least this period.

For Google Analytics data, user and event data is retained for 26 months, in line with Google’s retention settings. After this period, Google automatically deletes the user and event data, though aggregated data remains unaffected and continues to be accessible for trend analysis.

This provides ample time for data to be securely deleted from all systems, including backups, in accordance with the site’s retention policy and external services such as Google Analytics.

Further Privacy Information

External Links

While this site aims to include only relevant and reliable external links, users should exercise caution when clicking on any external links. The site owners cannot guarantee or verify the contents of external websites and will not be liable for any damages or consequences from visiting such links. If concerns are raised about an external link, it will be investigated and removed if necessary.

Adverts and Sponsored Links

This site may include sponsored links and advertisements served by third-party partners. These adverts may track referrals via cookies and are subject to the privacy policies of the advertisers. Clicking on these adverts redirects users to the advertisers’ websites, and any cookies placed will be saved to the user’s device. Users should note that this site is not liable for any damages or consequences resulting from external ads.

Social Media Platforms

Interactions with this site through external social media platforms are governed by the respective terms and privacy policies of those platforms. Users are advised to communicate with care and to avoid sharing sensitive information via social media. If needed, users should use more secure communication methods such as telephone or email.

The site may use social sharing buttons for sharing content directly from web pages to social media. Users should use these buttons at their own discretion, as the platform may track their actions through their social media account.

Shortened Links in Social Media

When sharing links through social media, some platforms may shorten URLs. Users should exercise caution before clicking on any shortened links, as some platforms may be vulnerable to spam or hacking. The site owners are not liable for any consequences from clicking on shortened links shared via social media.

Resources & Further Information

Changes to this policy.

Changes are defined as significant modifications within 1 (one) year, however, may list beyond for historical purposes.

25/10/2026

  • New website