Privacy Policy
Last updated: 13 May 2026
1. Who We Are
Website address: https://johndayal.com
For the purposes of the General Data Protection Regulation (GDPR) and applicable UK/EU data protection law, the data controller for this website is the owner of johndayal.com.
If you have any questions about this privacy policy or how we handle your personal data, please contact us at the email address provided in the contact form on our website.
2. Scope and Legal Basis
This privacy policy explains how we collect, use, store, and protect personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and any applicable national implementing legislation.
We process personal data only where we have a lawful basis to do so. The lawful bases we rely on are:
Consent (Article 6(1)(a) GDPR) – where you have given clear, freely given, specific, and informed consent for us to process your data.
Legitimate interests (Article 6(1)(f) GDPR) – where processing is necessary for our legitimate interests, provided those interests are not overridden by your rights.
3. Data We Collect
3.1 Contact Forms
When you submit a contact form on our website, we collect only the information you voluntarily provide in the form fields (for example, your name and email address). This data is collected with your explicit consent, given at the time of submission, for the sole purpose of responding to your inquiry. It is not used for marketing or shared with third parties without your explicit consent.
3.2 Comments
The facility for visitors to leave comments is currently disabled. If this feature is enabled in the future, this policy will be updated to describe how comment data is collected, stored, and processed.
3.3 Cookies
We do not currently use cookies on this website, nor do we set session cookies to test browser compatibility. No tracking or analytics cookies are in use. If cookies are introduced in the future, this policy will be updated and a cookie consent mechanism compliant with GDPR will be implemented prior to any cookies being set.
3.4 Embedded Content from Other Websites
Some pages on this site may include embedded content (e.g. videos, images, or articles) from third-party websites. Embedded content behaves as if you had visited those external websites directly. Those third-party websites may independently collect data about you, use cookies and tracking technologies, and monitor your interaction with the embedded content. We have no control over and take no responsibility for the privacy practices of those third-party sites.
3.5 Checkout / Transaction Data
We do not currently operate an online shop or checkout. If a checkout process is implemented in the future, this policy will be updated accordingly before launch.
4. How We Use Your Data
We use personal data collected via the contact form solely to respond to your inquiry or request and to maintain a record of communications where necessary. We do not use your personal data for automated decision-making or profiling.
5. Who We Share Your Data With
We do not sell, rent, or trade your personal data. We do not share personal data with third parties except where you have given explicit consent, or where we are required to do so by law or by a competent authority. If this changes in the future, this policy will be updated before any sharing takes place, and any processors will be bound by appropriate data processing agreements.
6. International Data Transfers
We do not currently transfer personal data outside the United Kingdom or European Economic Area (EEA). If any international transfer becomes necessary, we will ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR (e.g. Standard Contractual Clauses or adequacy decisions).
7. How Long We Retain Your Data
Data submitted via the contact form is retained only for as long as necessary to fulfil the purpose for which it was collected — typically to respond to and close your inquiry — or as required by law. When data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it.
8. How We Protect Your Data
We take reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
9. Your Rights Under GDPR
Under the GDPR, you have the following rights in relation to your personal data:
Right of access (Article 15) – You may obtain a copy of the personal data we hold about you.
Right to rectification (Article 16) – You may request correction of any inaccurate or incomplete data.
Right to erasure (Article 17) – You may request deletion of your personal data where there is no compelling reason to continue processing it, subject to any legal obligations.
Right to restriction of processing (Article 18) – You may request that we restrict processing of your data in certain circumstances.
Right to data portability (Article 20) – Where processing is based on consent and carried out by automated means, you may request your data in a portable format.
Right to object (Article 21) – You may object to processing based on legitimate interests.
Right to withdraw consent – Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right not to be subject to automated decision-making – We do not carry out solely automated decision-making with legal or similarly significant effects.
To exercise any of these rights, please contact us via the contact form on our website. We will respond within one calendar month, as required by the GDPR.
10. Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with the GDPR, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk Helpline: 0303 123 1113
We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.
11. Changes to This Privacy Policy
This policy was last updated on 13 May 2026. We may update it from time to time to reflect changes in our data processing activities or legal requirements. Any significant changes will be published on this page with an updated date.