Privacy Policy

Who I Am

This Privacy Policy explains how Adam Worden ("I", "me", "my") collects, uses, stores, and protects personal data when you use services operated under adamworden.uk, including:

• The contact form on adamworden.uk
• Microsoft Bookings consultation scheduling
• Outline Wiki and related knowledge-base services
• Any other service that links to this policy

Data Controller

For the purposes of UK GDPR and, where applicable, EU GDPR, Adam Worden is the data controller for personal data processed under this policy.

Contact: hello@adamworden.uk

Personal Data I Collect

Depending on the service you use, I may collect:

• Identity data: name, display name
• Contact data: email address, phone number, optional address
• Enquiry data: the message you send through the contact form, and the country it was sent from
• Booking data: appointment type, date and time, notes, and special requests
• Account and authentication data: login and session metadata, IP address, device and browser information
• Service content data: documents, comments, attachments, and revision history (Outline Wiki)
• Technical and diagnostic data: logs, error reports, and basic service performance metrics

I do not intentionally collect payment card data, government ID data, or special category personal data through these services unless explicitly required and separately communicated.

How I Use Personal Data

I use personal data to:

• Provide and operate the services
• Confirm, manage, and fulfil appointments
• Send confirmations, reminders, and service-related communications
• Authenticate users and maintain account security
• Maintain and improve service reliability and performance
• Investigate misuse, abuse, or security incidents
• Comply with legal and regulatory obligations

I do not sell personal data and do not share personal data with third parties for their own marketing.

Lawful Bases for Processing

Where UK or EU data protection law applies, processing is based on one or more of:

• Contract: to provide requested services (Article 6(1)(b))
• Legitimate interests: running, securing, and improving services (Article 6(1)(f))
• Legal obligation: compliance with applicable law (Article 6(1)(c))
• Consent: where specifically requested (Article 6(1)(a))

Service-Specific Notes

Contact Form

When you send a message through the contact form, I store your name, email address, message, and the country Cloudflare reports the request came from, so I can read and reply to your enquiry. The lawful basis is legitimate interests in responding to people who contact me (Article 6(1)(f)).

To block spam, the form uses Cloudflare Turnstile, which checks your browser without asking you to solve a puzzle. Your IP address is used briefly to verify that check and to limit how many messages can be sent in a short time. It is not stored with your message.

Microsoft Bookings

When you schedule through Microsoft Bookings, I process booking and contact details to administer your appointment.

Outline Wiki

When you access or contribute to Outline Wiki, I process account data, access metadata, and content you create or edit to provide collaboration and knowledge-base functionality.

Processors and Third Parties

I use trusted third-party providers to deliver services, including:

• Cloudflare (website hosting, contact form storage, and Turnstile spam protection)
• Microsoft 365 and Microsoft Bookings
• Outline Wiki hosting or infrastructure providers (where applicable)

These providers process personal data under their own terms and applicable data processing commitments. I may also disclose data if required by law, regulation, or legal process.

International Transfers

Some providers may process data outside the UK. Where applicable, I rely on appropriate transfer safeguards and provider contractual protections.

Data Retention

I keep personal data only as long as necessary for service operation, security, legal compliance, and legitimate business needs.

Typical retention examples:

• Contact form messages: deleted automatically 30 days after I close the enquiry, and in any case 90 days after it was last updated. You can ask me to delete yours sooner.
• Booking records: generally up to 12 months after appointment completion, unless longer retention is required
• Service and account logs: retained for security and operational troubleshooting for a reasonable period
• User-requested deletion: actioned unless retention is required by law or overriding legitimate grounds

Security

I apply reasonable technical and organisational measures to protect personal data. No internet service can be guaranteed 100 percent secure, but I take appropriate steps to reduce risk.

Your Rights

Subject to applicable law, you may have the right to:

• Access personal data I hold about you
• Rectify inaccurate personal data
• Erase personal data
• Restrict or object to processing
• Data portability
• Withdraw consent where processing is based on consent

To exercise rights, contact: hello@adamworden.uk

Complaints

If you are not satisfied with how your data is handled, you can contact me first at hello@adamworden.uk. You may also lodge a complaint with the UK Information Commissioner's Office (ICO): ico.org.uk

Cookies and Similar Technologies

Services may use essential cookies or similar technologies for authentication, session handling, security, and core functionality.

Microsoft Bookings pages may use cookies according to Microsoft's policies. If separate cookie controls are introduced on adamworden.uk, this policy will be updated accordingly.

Children's Privacy

Services are not directed at children unless expressly stated. If I become aware that personal data has been provided without appropriate authority, I will take steps to address it in line with applicable law.

Changes to This Policy

I may update this policy from time to time. The "Last updated" date will reflect revisions. Continued use of services after updates are posted constitutes acceptance of the revised policy.

Contact

For privacy questions or data requests, contact: hello@adamworden.uk