Privacy policy

This policy explains what information this website collects about you, why, and what you can do about it. The site collects very little. It has no analytics, no advertising and no tracking cookies.

Who we are

This website is run by HEATHER HERBERT LTD, a company registered in Scotland, company number SC906251. Our registered office is 62 Back Hilton Road, Aberdeen, Scotland, AB25 3ST. We are responsible for the personal information described here.

To ask about your information, email heather@heatherherbert.uk.

Server logs

Like almost every website, our web server records each request it receives. Each record includes your IP address, the page you asked for, the date and time, and your browser's description of itself.

We use these logs to keep the site secure and to fix problems. This is our legitimate interest in running a safe, working website. Our web host, LiquidNet, stores the logs on our behalf. We delete them automatically after no more than two months.

The contact form

When you use the contact form, we store what you enter:

• your name and email address
• your phone number and "reply by" date, if you give them
• your message
• any file you attach

We also store your IP address and your browser's description of itself, to help us spot abuse of the form.

We then email you a link to confirm that the address is yours. Your message reaches us only after you click that link. If you do not confirm within 48 hours, we delete the message and any attachment.

Once you confirm, we send your message to Heather by email and by Telegram message, so she can reply. The file you attached goes with the email, and we then delete our stored copy of it. We keep the message itself for 60 days after you confirm it, so we can deal with your enquiry. It is then deleted automatically. You can ask us to delete it sooner.

We use this information only to reply to you. We do not add you to a mailing list, and we do not sell or share your information for marketing. Our reason for using it is our legitimate interest in answering the messages people send us.

The newsletter

The newsletter is run on Buttondown. If you subscribe, you give your email address to Buttondown, not to this website. Buttondown's own privacy policy covers what it does with it.

Who else handles your information

We use a few other companies to run the site and the contact form. Each one handles your information only as needed to provide its service.

• LiquidNet hosts the website, its database and the server logs.
• Brevo sends the confirmation email and the notification email.
• Google (Gmail) holds the email copy of your message in Heather's inbox.
• Telegram carries the notification message to Heather.

Some of these companies may process information outside the UK. Where they do, they use legal safeguards such as standard contract clauses.

Cookies

The site sets two cookies, and both are needed for it to work.

• heather-herbert-session keeps your visit together from page to page, for example while you fill in the contact form.
• XSRF-TOKEN protects the contact form from being submitted by other websites.

Both expire after two hours. Neither tracks you across other websites.

YouTube

The site's fonts are served from this website, so loading them sends nothing to anyone else.

The video page shows thumbnails from YouTube and plays videos in an embedded YouTube player. When your browser loads these, YouTube, which is part of Google, receives your IP address. The player uses YouTube's privacy-enhanced mode, so YouTube sets no cookies unless you play a video. YouTube's use of this information is covered by Google's privacy policy.

Your rights

Under UK data protection law, you can ask us to:

• give you a copy of the information we hold about you
• correct information that is wrong
• delete your information
• stop or limit how we use it

You can also object to how we use your information. Email heather@heatherherbert.uk to make any of these requests. We will reply within one month.

If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office. We would like the chance to put things right first, so please contact us before you do.

Changes to this policy

If we change how the site handles personal information, we will update this page and the date at the top.