Privacy Policy

Last updated: December 14, 2025

This Privacy Policy explains how I, Mandy Boylett (the data controller), collect, use, and protect your personal information when you visit my website www.tomsonbook.uk (the “Site”), which accompanies my book Tomson and the Afterlife – The Book of Evidence.

I take your privacy seriously and only collect the minimum information needed. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information I Collect

I may collect the following personal data:

• Via the contact form: Your name, email address, and any message you send (to respond to your enquiry).
• Automatically via cookies: Basic technical data like IP address, browser type, and visit details (for site functionality and analytics—see separate Cookie Notice).

I do not collect sensitive personal data (e.g., health or religious beliefs) unless you voluntarily share it in a message.

2. How I Use Your Information

I use your data only for:

• Responding to your contact form messages (lawful basis: legitimate interests).
• Improving the Site (e.g., via essential cookies; lawful basis: consent where required).

I do not sell, share, or use your data for marketing without your explicit consent.

3. Cookies

The Site uses cookies for essential functions and basic analytics. For full details, including how to manage them, see my Cookie Notice (linked via the cookie banner).

4. Sharing Your Information

I do not share your personal data with third parties, except:

• If required by law.
• With service providers (e.g., web hosting) who are contractually bound to protect it.

No international transfers occur outside the UK/EEA.

5. Data Retention

I keep contact form data only as long as needed to respond (usually a few months) and delete it afterwards. Cookie data follows the Cookie Notice.

6. Your Rights

Under UK data protection law, you have the right to:

• Access your data.
• Correct inaccuracies.
• Request deletion.
• Object to or restrict processing.
• Withdraw consent (where applicable).
• Data portability.

To exercise these rights, please use the contact form on the Site. I will respond within one month.

You can also complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

7. Security

I use appropriate measures (e.g., secure hosting) to protect your data, but no online transmission is 100% secure.

8. Changes to This Policy

I may update this policy occasionally. Significant changes will be noted on the Site.

9. Contact Me

For questions, rights requests, or any enquiries, please use the contact form on the Site. I read every message and will reply as soon as I can.