Last updated: 28 August 2026
This privacy notice explains how Theo Grange collects, uses and protects personal information when you visit theogrange.co.uk or make a private enquiry.
Who is responsible for your information
The data controller for this website is Theo Grange. For privacy questions or requests, email TheoGrange@proton.me.
Information collected
If you contact Theo by email or WhatsApp, the information you choose to provide may include your name or preferred name, contact details, booking requirements, availability and the content of your messages. Please share only what is reasonably necessary for your enquiry.
The website may also process limited technical information needed for security and operation, such as IP address, browser type, device information, requested pages and server logs. With your consent, Google Analytics may collect information about how visitors find and use the site.
How information is used
- To respond to enquiries and discuss or manage a potential booking.
- To provide the service you request and maintain appropriate records.
- To protect the website, prevent misuse and resolve technical problems.
- To understand website performance and improve its content, where you have consented to analytics.
- To comply with legal, accounting or regulatory obligations where applicable.
The principal lawful bases are taking steps at your request before an agreement, performing an agreement, legitimate interests in operating and securing the website, compliance with legal obligations and consent where required for analytics cookies.
Discretion and sensitive information
Enquiries are treated as private and confidential. Information is not sold and is not used for unrelated marketing. Because the nature of an enquiry may reveal personal or sensitive details, messages are handled with particular care and access is kept limited.
Who may process information
Information may be processed by service providers required to operate the website and communications, including the website host, WordPress services and security providers. Email is handled through Proton. If you choose WhatsApp, your communications are also subject to WhatsApp and Meta’s privacy practices. Google processes analytics information only where analytics consent has been given.
Information may also be disclosed where required by law, to protect legal rights or to prevent fraud or serious harm. Service providers may process data outside the United Kingdom; where this occurs, the relevant provider’s contractual and legal transfer safeguards apply.
How long information is retained
Personal information is kept only for as long as reasonably necessary for the purpose for which it was collected. Routine enquiries are normally deleted within 24 months after the last meaningful contact, unless a shorter period is appropriate or information must be retained for an ongoing booking, legal obligation, dispute, safeguarding or security reason. Technical logs and analytics information follow the retention settings of the relevant service.
Cookies and analytics
The website uses essential technologies required for security and basic operation. Optional analytics cookies are used only after you make a choice through the cookie banner. You can refuse optional cookies and can change or withdraw your choice later without affecting access to the site. Further detail is available through the cookie settings shown on the website.
Your rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct or erase your information; restrict or object to its use; receive certain information in a portable form; and withdraw consent where processing relies on consent. To exercise a right, email TheoGrange@proton.me. Reasonable information may be requested to confirm your identity.
You may also complain to the UK Information Commissioner’s Office at ico.org.uk.
Security and age
Reasonable technical and organisational safeguards are used to protect information, although no internet transmission can be guaranteed completely secure. This website and its services are intended only for adults aged 18 or over, and information from children is not knowingly collected.
Changes to this notice
This notice may be updated when the website, services or legal requirements change. The latest version will always appear on this page.