Your data, handled honestly

This privacy policy explains how Joontide (operated by Joe Diton, sole trader, based in Reading, Berkshire, UK) collects, uses, and protects your personal data when you visit this website or contact me. I take your privacy seriously and have designed this site to minimise data collection from the ground up.

1. Who I am

Business name: Joontide
Operated by: Joe Diton
Location: Reading, Berkshire, UK
Email: joe@joontide.co.uk

Joe Diton is the data controller for all personal data collected through this website.

2. What data I collect and why

2.1 Cloudflare (website infrastructure)

This website is delivered via Cloudflare's network. Cloudflare processes IP addresses and request metadata to provide DDoS protection, performance optimisation, and security. This is necessary to operate a secure, functional website and is processed on the basis of legitimate interests.

Cloudflare does not track individuals across websites or build advertising profiles. Data is processed within Cloudflare's infrastructure under their Data Processing Addendum.

Cloudflare's privacy policy: cloudflare.com/privacypolicy/

2.2 Google Search Console

I use Google Search Console to monitor how this site appears in Google Search. This tool does not place cookies on your device and does not collect personally identifiable information. It provides aggregate data about search queries that lead to this site — not data about individual visitors.

Google's privacy policy: policies.google.com/privacy

2.3 Contact form and book a meeting form (Moxie)

The contact page includes two forms powered by Moxie:

• A general contact form — collects your name, email address, and message
• A book a meeting form — collects your name, email address, and availability preferences

When you submit either form, the information you provide is used solely to respond to your enquiry or to schedule your meeting. I do not use this data for marketing without your separate consent, and I do not share it with other third parties.

Moxie is a US-based service. See section 5 (International data transfers) for more detail.

Moxie's privacy policy: withmoxie.com/terms-legal/privacy-policy

2.4 Newsletter sign-up (MailerLite)

At the bottom of every page there is an optional newsletter sign-up form. If you choose to subscribe, I collect your email address. I use this to send you occasional updates about Joontide — no spam, no third-party promotions, no sales cadences.

Your email address is stored and processed by MailerLite. By subscribing, you give explicit consent to receive these emails. You can unsubscribe at any time using the link in any email, or by emailing joe@joontide.co.uk.

MailerLite is a US-based service. See section 5 (International data transfers) for more detail.

MailerLite's privacy policy: mailerlite.com/legal/privacy-policy

3. Cookies and tracking

I do not use analytics cookies, advertising cookies, or tracking pixels on this website. I do not use Google Analytics, Facebook Pixel, or any equivalent tools.

Cloudflare may set a strictly necessary cookie (__cf_bm) for bot detection. This cookie does not track you across websites and contains no personal information. It is exempt from consent requirements under PECR as it is technically essential.

MailerLite's embedded sign-up form may set a functional cookie if you interact with it. This is used solely to manage the sign-up flow and is not used to track your browsing behaviour.

No other cookies are set by this website.

4. Legal basis for processing

Where I process personal data, I rely on the following legal bases under UK GDPR:

• Legitimate interests — Cloudflare infrastructure and security processing
• Contract performance — processing enquiry and booking form data in order to respond to you
• Consent — newsletter subscriptions (you can withdraw consent at any time by unsubscribing)

5. International data transfers

Some of my third-party service providers are based in the United States. Where your personal data is transferred outside the UK, I ensure appropriate safeguards are in place:

• MailerLite — transfers are covered by the UK Extension to the EU-US Data Privacy Framework and, where applicable, Standard Contractual Clauses.
• Moxie — transfers are governed by Moxie's Data Processing Agreement, which commits to processing UK and EEA data in compliance with applicable data protection law. You can review their current DPA at withmoxie.com/terms-legal/data-processing.
• Cloudflare — operates under its own DPA across a global network. Transfers are covered by Standard Contractual Clauses and applicable adequacy decisions.

6. Data sharing

I do not sell, rent, or trade your personal data. The only third parties that process data in connection with this website are:

• Cloudflare — infrastructure and security
• Google — Search Console (aggregate search data only, no personally identifiable information)
• Moxie — contact and meeting form submissions
• MailerLite — newsletter subscriptions

I do not share your personal data with any other parties unless required to do so by law.

7. Data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, I will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it, as required by UK GDPR. If the breach is likely to result in a high risk to you personally, I will also notify you directly without undue delay.

8. Data retention

I retain contact and meeting form submissions for as long as necessary to fulfil the purpose for which they were submitted — typically up to 12 months, after which they are deleted. Newsletter subscribers' email addresses are retained until you unsubscribe.

9. Children

This website is not intended for use by children under the age of 13. I do not knowingly collect personal data from anyone under 13. If you believe a child has provided me with personal data, please contact me at joe@joontide.co.uk and I will delete it promptly.

10. Third-party links

This website may contain links to third-party websites. I am not responsible for the privacy practices of those sites. I encourage you to review their privacy policies before providing any personal information.

11. Your rights

Under UK GDPR, you have the right to:

• Access the personal data I hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Object to or request restriction of processing
• Data portability (where applicable)
• Withdraw consent at any time, where consent is the legal basis for processing
• Lodge a complaint with the ICO

To exercise any of these rights, contact me at joe@joontide.co.uk. I will respond within one calendar month.

12. Complaints

If you are not satisfied with how I handle your personal data, you have the right to lodge a complaint with the UK's data protection supervisory authority: ico.org.uk/make-a-complaint.

13. Changes to this policy

I may update this privacy policy from time to time. The "Last updated" date at the top of this page will always reflect the most recent revision. I recommend checking this page periodically.

14. Contact

For any privacy-related questions or requests, contact Joe Diton at joe@joontide.co.uk.