Privacy Policy
Last updated: 9th August 2026
1. Who we are
This website is operated by Gary Simpson, trading as a sole trader [/ as "Margin of Safety"], based in Durham, England.
I am the data controller for personal data collected through garysimpson.consulting.
Contact: gary@garysimpson.consulting
2. What personal data I collect
Currently, this site collects personal data only through the contact form:
Name
Email address
Any details you include in your message
The site does not currently use analytics, cookies, tracking pixels, or a newsletter/mailing list. If any of these are added in future, this policy will be updated first, and a separate cookie consent mechanism will be implemented before any non-essential cookie is set.
3. How and why I use your data
Purpose
Lawful basis (UK GDPR Art. 6)
Responding to enquiries submitted via the contact form
Legitimate interests (responding to business enquiries), or steps taken prior to entering a contract with you
I don't use your data for any other purpose without telling you and, where required, obtaining your consent.
4. Who I share data with
I don't sell your personal data.
The only third party currently involved is my website host:
Hosting: IONOS SE — processes data only as necessary to operate the site's infrastructure.
I don't currently use analytics, email marketing, or cookie consent platforms. This section will be updated, with details of any new processor and applicable safeguards, before any such tool goes live.
5. International transfers
IONOS SE hosting infrastructure may involve processing within the EEA. No transfer outside the UK/EEA currently takes place in connection with this site. If that changes, this section will specify the safeguard relied upon (e.g. UK International Data Transfer Agreement).
6. Cookies
This site does not currently set any cookies beyond those, if any, strictly necessary for it to function (e.g. session cookies required by the hosting platform). No analytics or marketing cookies are used.
If cookies requiring consent are introduced in future, a compliant consent banner will be implemented first, and this section will be updated with a full breakdown of each cookie's provider, purpose, and expiry.
7. How long I keep your data
Contact form enquiries are retained for [12 months] from last contact, unless a client relationship develops, in which case standard business record retention applies.
8. Your rights
Under UK GDPR you have the right to:
Access the personal data I hold about you
Rectify inaccurate data
Erasure ("right to be forgotten"), subject to legal exceptions
Restrict or object to processing
Data portability
Lodge a complaint with the ICO (ico.org.uk, 0303 123 1113)
To exercise any of these rights, contact gary@garysimpson.consulting. I'll respond within one month.
9. Security
I apply appropriate technical and organisational measures to protect your data, proportionate to the risk, including HTTPS encryption in transit and access controls on the hosting account.
10. Children
This site is not directed at children, and I do not knowingly collect data from anyone under 13.
11. Changes to this policy
I may update this policy as the site or my processing activities change — for example, if analytics, a newsletter, or cookies are introduced. The "last updated" date at the top reflects the most recent revision, and material changes will be highlighted on the site.