Privacy Policy
Effective Date: 24th March 2025
Last Updated: 24th March 2025
I am committed to respecting and protecting your personal data. This Privacy Policy explains how I collect, use, disclose, and safeguard your information when you visit www.jameswboyce.com (the “Site”) and any related subdomains, mobile versions, or associated services.
1. Identity of the Controller
I am James William Boyce, operating under Boyce Property Services Ltd. (Company Number: 06258012) in the United Kingdom. I serve as the controller and operator of this Site.
Contact Information:
• Email: james@jameswboyce.com
• Address: 6 Bexley Square, Salford, Greater Manchester, M3 6BZ.
2. Personal Data Collected and Purposes
I collect personal data both directly (e.g., via comments or inquiry forms) and automatically (e.g., through analytics). The specific categories of personal data collected and the lawful bases for processing are detailed below.
2.1. Comments
• Data Collected: Name, email address, website (if provided), comment content, IP address, and browser user agent.
• Purpose & Legal Basis:
• Purpose: Facilitate the posting of comments and detect spam.
• Legal Basis: Performance of a contract (enabling Site functionality) and legitimate interests (spam prevention).
• Additional Information: An anonymised hash of an email address may be used by the Gravatar service. Upon comment approval, a profile picture (if applicable) may be visible to the public. For more information, refer to the Gravatar Privacy Policy: https://automattic.com/privacy/
2.2. Media
• Data Collected: Uploaded images or media, which may include metadata containing geolocation or other details.
• Purpose & Legal Basis:
• Purpose: Display uploaded content on the Site.
• Legal Basis: Performance of a contract or legitimate interests.
• Caution: Any embedded location data in images may be accessible to visitors. Removal of such metadata is recommended prior to uploading.
2.3. Cookies and Tracking Technologies
• Nature of Cookies: Cookies are text files stored on a user’s device to assist with various Site functionalities (e.g., login status, language preferences).
• Purpose & Legal Basis:
• Purposes:
1. Remember user preferences (legitimate interests or consent, depending on applicable laws).
2. Maintain login sessions (performance of a contract).
3. Analyse Site usage (legitimate interests or consent, depending on jurisdiction).
• Cookie Types:
• Comment Cookies: Store user details for convenience when posting additional comments.
• Login Cookies: Maintain authenticated sessions for a specified duration.
• Session Cookies: Used temporarily and deleted upon browser closure.
• Analytics Cookies: May collect anonymised usage data for traffic analysis.
• User Choices: Depending on local regulations (e.g., EU GDPR, ePrivacy Directive), users may encounter a cookie banner with options to accept or manage cookies.
• Browser Settings: Users may configure their browsers to reject or alert them about cookies, but parts of the Site may not function optimally if cookies are refused.
2.4. Embedded Content from Third-Party Websites
• Data Collected: IP address, browser details, cookies, and user interactions with embedded content (videos, images, articles, etc.).
• Purpose & Legal Basis: Embedded content behaves as though the user has visited the third-party site directly. Such third parties may deploy their own tracking.
• Liability: I hold no control over external sites’ data collection practices. Users should review each third party’s Privacy Policy.
2.5. Contact or Inquiry Forms
• Data Collected: Name, email address, and any additional details the user voluntarily provides.
• Purpose & Legal Basis:
• Purpose: Respond to inquiries, provide requested information or services.
• Legal Basis: Performance of a contract, pre-contractual steps, or consent.
• Retention Period: Contact form entries are typically retained for six to twelve months for customer service purposes, unless otherwise specified or unless you opt in to receive marketing.
2.6. Newsletter or Marketing Communications
• Data Collected: Name, email address, and any user preferences.
• Purpose & Legal Basis:
• Purpose: Send newsletters, updates, and promotional materials.
• Legal Basis: Consent or legitimate interests (where permissible).
• Opt-Out: Users may unsubscribe at any time by selecting the “unsubscribe” link provided in emails or by contacting me directly.
3. Use of Personal Data
Personal data collected through the Site may be used for:
• Providing and customising user experiences.
• Responding to inquiries, comments, or feedback.
• Monitoring and analyzing Site activity, trends, and usage.
• Detecting and preventing fraudulent or unauthorised activity.
• Enforcing terms, conditions, and policies, and complying with legal obligations.
4. Legal Bases for Processing (Applicable to EU/EEA Visitors)
Under the General Data Protection Regulation (GDPR), I rely on one or more of the following legal bases:
1. Consent: When users have explicitly agreed to certain processing activities (e.g., accepting non-essential cookies).
2. Performance of a Contract: Where processing is necessary to provide the requested services (e.g., enabling comment functionality).
3. Legitimate Interests: Where such interests do not override the user’s fundamental rights and freedoms (e.g., maintaining security, analysing website usage).
4. Legal Obligation: Where compliance with legal or regulatory requirements is necessary.
5. Disclosure of Personal Data
• Third-Party Service Providers: Personal data may be shared with third parties that provide operational or analytical services (e.g., hosting, analytics, marketing) under strict confidentiality obligations.
• Password Reset Requests: The IP address may be included in a password reset email if such functionality is requested.
• Legal or Regulatory Requests: Personal data may be disclosed if required by law, court order, or if necessary to safeguard the rights or safety of any individual.
• Business Transfers: In the event of a merger, acquisition, or sale of some or all assets, personal data may be transferred subject to confidentiality agreements.
6. International Data Transfers
Where personal data is transferred to or processed by entities located outside the user’s jurisdiction (e.g., servers located in a different country), I implement appropriate safeguards—such as the EU Standard Contractual Clauses—to protect personal data in compliance with applicable laws.
7. Retention of Personal Data
• Comments: Retained indefinitely for reference and streamlined moderation.
• User Accounts: Stored indefinitely unless a user requests deletion (excluding the username, which cannot be altered once set).
• Other Data: Retained as required for legitimate business, legal, or security purposes. Retention durations may vary according to the purpose and nature of the data.
8. Data Subject Rights
Depending on jurisdiction (e.g., EU/EEA under the GDPR, California under CCPA/CPRA), users may have rights including:
• Access (Subject Access Request): Obtain a copy of personal data held.
• Rectification: Correct or update inaccurate personal data.
• Erasure (Right to be Forgotten): Request deletion, subject to certain exceptions.
• Restriction of Processing: Limit processing in specific circumstances.
• Objection: Object to particular processing activities.
• Withdraw Consent: Where processing is based on consent, that consent may be withdrawn at any time without affecting previous processing.
• California Residents: Right to know about data collection/sharing, request deletion, opt out of data “sales,” and not be discriminated against for exercising these rights.
Requests to exercise these rights should be directed to james@jameswboyce.com. Verification of identity may be required before fulfilling such requests. If a resolution is unsatisfactory, EU/EEA residents may lodge a complaint with their local Data Protection Authority.
9. Data Security Measures
Reasonable and appropriate administrative, technical, and physical safeguards are employed to protect personal data against unauthorised access, alteration, disclosure, or destruction. While I strive to ensure a high level of security, no method of internet transmission or electronic storage can be guaranteed as entirely secure.
10. Children’s Privacy
This Site is not directed to individuals under the age of 16 (or relevant age of consent in the applicable jurisdiction). Personal data of minors is not knowingly collected. If it is determined that personal data of a minor has been inadvertently collected, measures will be taken to remove such data promptly.
11. External Links
Links to external websites or services that are not operated or controlled by me may be provided. I am not responsible for the privacy or data handling practices of such third-party sites. Users are advised to review the privacy policies of any external sites visited.
12. Policy Amendments
I may revise or update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or enhancements to the Site. Revisions will be indicated by a new “Last Updated” date. Continued use of the Site after such changes constitutes acceptance of the updated Privacy Policy.
13. Contact Information
For inquiries regarding this Privacy Policy or to exercise data subject rights, please use the following contact details:
• Email: james@jameswboyce.com
• Address: 6 Bexley Square, Salford, Greater Manchester, M3 6BZ