Effective date: 20 May 2026

Data Controller: Alla Thompson
Email: hello@allathompson.com
Website: https://allathompson.com

1. What data do I collect?

When you use the contact form on this website, I collect:

• Your name

• Your email address

• Your message

I do not collect any other personal data.

2. Why do I collect it?

To respond to your enquiry.

Lawful basis: Legitimate interests (Article 6(1)(f) UK GDPR). You reasonably expect a response when you contact me, and this processing is minimal and low-risk.

3. How long do I keep it?

30 days. After that, your data is permanently deleted.

4. Do I share your data?

No. I do not share your data with anyone.

5. Where is your data stored?

In my password-protected email account (UK-based). I do not use cloud CRMs or third-party databases.

6. Do I transfer data outside the UK?

No.

7. Your rights

Under UK GDPR, you have the right to:

• Access your data

• Correct inaccurate data

• Request deletion of your data

• Object to processing (based on legitimate interests)

• Lodge a complaint with the ICO

To exercise any of these rights, email me at hello@allathompson.com. I will respond within 30 days.

8. Cookies

I use only strictly necessary cookies (no analytics, no marketing). See my Cookie Policy for details.

9. Complaints

If you believe I have mishandled your data, please contact me first at hello@allathompson.com. If you are not satisfied, you can complain to the Information Commissioner’s Office (ICO).

10. Contact

For any privacy-related matter:
Email: hello@allathompson.com

Last updated: 20 May 2026