Privacy Policy
Last Updated: 4 October 2026
This Privacy Policy explains how Tommy Baker (“we”, “us”, “our”) collects, uses, and protects your personal information when you use the website fullysealed.co.uk (the “Website”).
1. Information We Collect
Forms on This Website
We collect personal information through the first-look request form on our Website:
- First-look Form: Your name, work email address and organisation and, if you choose to give them, where your contacts are kept, roughly how many contacts you have, and what worries you most
All data collected through this form is provided voluntarily by you when you submit it.
Hosting and Form Processing
This Website is hosted on Netlify. Form submissions are processed and stored by Netlify’s form handling service. Netlify may collect technical data such as IP addresses and browser information as part of their hosting infrastructure. For details, see Netlify’s Privacy Policy.
Visitor Counting and Fonts
We count visits to this Website with GoatCounter. It does not use cookies, does not store your IP address, and does not identify or follow individual visitors; it records counts such as which page was viewed, the type of browser and screen, and the country a visit came from.
The Website’s typefaces are delivered by Google Fonts, so your browser fetches them from Google, which receives your IP address in order to send them. For details, see Google’s Privacy Policy.
2. How We Use Your Information
We use the personal information you provide to us for the following purposes:
- First-look Form: To reply to your request, tell you how to send the two exports, and prepare your first look at where your records leak
Nothing you send is added to any mailing list. We will never use your personal information for purposes other than those stated above without your explicit consent.
3. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:
- Consent: By submitting a form on our Website, you consent to us processing your data for the stated purposes
- Legitimate Interests: We have a legitimate interest in responding to enquiries and providing information about our services
4. Data Sharing and Third Parties
We do not sell, rent, or share your personal information with third parties, except in the following limited circumstances:
- Service Providers: We use Netlify to host this Website and process form submissions. Netlify is contractually obligated to protect your data and use it only for the purposes we specify. We also use GoatCounter to count visits and Google Fonts to deliver the Website’s typefaces, as described in section 1
- Legal Requirements: We may disclose your information if required by law or to protect our legal rights
We will never share your data with third parties for their own marketing purposes without your explicit consent.
5. Data Storage and Security
Your personal information is stored securely using industry-standard security measures. We implement appropriate technical and organisational safeguards to protect your data from unauthorised access, alteration, disclosure, or destruction.
Form submissions are transmitted securely using HTTPS encryption. We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
6. Your Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
- Right to Access: You can request a copy of the personal data we hold about you
- Right to Rectification: You can request that we correct any inaccurate or incomplete data
- Right to Erasure: You can request that we delete your personal data (“right to be forgotten”)
- Right to Restrict Processing: You can request that we limit how we use your data
- Right to Data Portability: You can request a copy of your data in a machine-readable format
- Right to Object: You can object to our processing of your personal data
- Right to Withdraw Consent: You can withdraw your consent at any time (this does not affect the lawfulness of processing before withdrawal)
To exercise any of these rights, please contact us using the details provided below.
7. Data Retention
We retain your personal information for the following periods:
- First-look requests: Up to 24 months from the date of submission, or until you request deletion
You may request deletion of your data at any time by contacting us.
8. Cookies
Our Website does not use cookies for tracking or advertising purposes. We do not use any analytics services that track individual users.
9. International Data Transfers
Your personal information may be stored and processed in countries outside the United Kingdom and European Economic Area (EEA) as part of Netlify’s hosting infrastructure and the other services named in section 1. Where this occurs, we ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
10. Children’s Privacy
Our Website is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated “Last Updated” date.
12. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights, or want to request deletion of your data, please contact us:
Email: tommybaker@icloud.com
Website: fullysealed.co.uk
We will respond to your request within 30 days as required by GDPR.
13. Complaints
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the UK’s supervisory authority:
Information Commissioner’s Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113