Skip to content
Jonny Wilson

Privacy notice

Jonny Wilson operates jonnywilson.co.uk and decides how personal information collected through this site is used. For privacy requests, use the professional enquiries form and select “Other professional enquiry”. A public contact email is not currently configured on the website.

Information collected

The first-party communications service stores contacts, enquiry records, selected topics, confirmation and withdrawal history in Supabase. Cloudflare Turnstile and short-lived hashed abuse identifiers protect forms. Brevo processes confirmation, enquiry and authorised marketing emails. Enquiries and account registration do not subscribe you to marketing; accepting this notice is not marketing consent. Account verification and password-recovery delivery remain separate.

Depending on how you use the site, information may include your name, email address, company or organisation, enquiry category, information in your message, newsletter subscription information, and basic technical or security information such as IP address, browser details, request time and server logs.

The site also uses limited browser storage for theme preferences, calculator documents and training progress. With consent, Google Analytics also processes information about use of the site. See Cookies and local storage.

The course overview and Module 01 are available without an account. A free account is required to continue to later modules. Guest progress and practical-activity responses remain in this browser. If you create an account, Supabase processes your first and last name, email address, optional job role, authentication information, training progress and responses so they can sync across devices. When you accept the privacy notice, the site stores the notice version and a server-generated acknowledgement time in a protected database record after authentication. Existing guest progress is copied to your account after sign-in and removed from guest storage only after the cloud save succeeds. Unsent account changes may be retained in this browser in storage scoped to your account and retried when a connection is available. If browser storage is unavailable, progress may be available only for the current visit. Sign in on the original browser to import progress started there.

Pending account progress can include a reset request and changes made after it. These browser records belong to the signed-in account and are kept until synchronization succeeds or you clear browser storage. They are not imported into another account.

Why information is used

Information may be used to respond to enquiries, maintain appropriate records of professional correspondence, operate and secure the website, prevent spam and abuse, deliver newsletter emails requested by subscribers, maintain unsubscribe or suppression records, and meet legal or regulatory obligations. Optional analytics information is used to understand which pages, tools and training resources are useful and to improve the site.

Lawful bases

The lawful basis depends on the purpose. Legitimate interests may apply when responding to relevant professional enquiries, maintaining correspondence and protecting the site. Consent applies to optional newsletter emails. Legal obligation may apply where records must be retained by law. Steps requested before entering a contract may apply if someone asks about a specific potential engagement. Consent applies to Google Analytics and can be withdrawn through “Cookie preferences” in the footer. Not every form submission relies on consent.

Services and processors

  • Brevo processes necessary service messages and separately confirmed marketing. Open and click tracking must be disabled before delivery is enabled. Supabase holds the authoritative contact, preference and suppression records.
  • The website hosting provider may process request, security and server-log information.
  • Supabase provides optional training accounts and stores registered-user progress.
  • Google provides Google Analytics through measurement ID G-15HR211PNL. The Google tag remains blocked until analytics consent is accepted.
  • Email, security, spam-prevention and logging providers may process information where necessary to deliver or protect these services.

Some providers may process information outside the United Kingdom. Where required, the relevant provider or operator may use appropriate safeguards for international transfers.

Retention

Closed enquiries are reviewed after 12 months. Unconfirmed subscription requests expire after 30 days; confirmation links expire after 48 hours. Minimal withdrawal, suppression and consent evidence is retained separately and reviewed annually so an old import cannot restart unwanted email. Rights requests are verified and processed manually, with contractual or legal records retained where necessary. Provider data and international-transfer arrangements are reviewed before activation.

  • General enquiries are kept only as long as reasonably needed to respond and maintain appropriate records.
  • Newsletter records are kept while a person remains subscribed and as needed to maintain unsubscribe or suppression records.
  • Security logs are normally kept for a limited period unless needed for investigation.
  • Guest training progress remains until it is cleared in the browser or migrated to an account. Registered-user progress remains while the account is active unless deletion is requested.
  • Google Analytics retention is controlled in the Google Analytics property. Analytics cookies and identifiers remain until they expire or are cleared using browser controls.
  • Information connected with an actual professional agreement may be retained longer for legal, contractual, insurance or tax purposes.

Your rights

You can request a verified personal-data review without creating an account. Optional marketing can be stopped immediately through an unsubscribe link, separately from account deletion.

To request account or training-data deletion, use the professional enquiries form and identify the email address used for the account. The request will be verified before data is removed.

Depending on the circumstances, you may have rights to request access, correction or deletion; restrict or object to processing; request data portability; and withdraw newsletter or analytics consent. These rights do not apply in every circumstance. You can also complain to the Information Commissioner’s Office.

Newsletter and marketing

Enquiry submissions are not automatically added to the newsletter. Newsletter subscription is optional and requires a separate action. Subscribers can unsubscribe using the link in any newsletter. A minimal suppression record may be retained after unsubscribing to prevent future emails.

Updates

This notice may be updated when the website, services or legal requirements change.

Last updated: 5 October 2026.