This notice covers the LetsGeek website at letsgeek.co.uk. Brianna Kennedy is the data controller responsible for personal information handled through this website. For privacy questions, rights requests or complaints, email [email protected].
App privacy policies
The mobile apps have separate notices because they handle different information. If you arrived here from an app or an older privacy link, choose the relevant policy:
What information is involved
When you visit, your browser sends technical information needed to request and receive pages. This can include your IP address, requested page, date and time, browser information and referring page. The hosting and security services may record this information in access, error or security logs.
If you email me, I receive your email address and any name, message or attachments you choose to send. Please avoid sending sensitive information that is not needed for your enquiry.
The current website has no visitor accounts, contact form, advertising code, analytics code or embedded third-party media. The mobile apps’ data practices are described in their own notices, not this one.
Why information is used
- Delivering and protecting the website: technical information supports page delivery, fault diagnosis and protection against misuse. The proposed lawful basis is legitimate interests in operating a reliable, secure website.
- Responding to messages: contact information and correspondence are used to understand and answer your enquiry. The proposed lawful basis for ordinary enquiries is legitimate interests in communicating with people who contact me.
- Handling data-protection requests: information needed to verify and respond to a rights request is used to meet applicable legal obligations.
Legitimate interests must be balanced against your rights and reasonable expectations. You may object to processing based on legitimate interests using the contact details above.
Hosting, security and recipients
The website is hosted on an IONOS virtual private server, with Cloudflare’s Free plan and Web Application Firewall (WAF) in front of it to deliver and protect traffic. Requests therefore pass through these services. The support mailbox uses Google Workspace to send and receive email.
The exact provider entities, processing locations and any applicable safeguards for transfers outside the UK are being verified. This notice does not claim that information stays exclusively in the UK or that a particular transfer safeguard has been confirmed.
Cookies and similar technologies
The current website code does not set cookies or use browser storage. Cloudflare’s enabled security features may use cookies or similar technologies; the active configuration must be checked before launch. See Cloudflare’s explanation of its cookies.
Analytics, advertising, contact forms and embedded media are possible future additions, not current features. Before adding them, this notice and the relevant consent or other controls will need to reflect the services actually used. Technologies requiring consent must not run before that consent is given.
How long information is kept
Apache logs under /var/log/apache2/ are configured for daily rotation, keeping 14 rotated files plus the active log. For regularly written logs, this normally provides approximately two weeks of history plus the current day. Empty logs are not rotated, so this is a rotation-based schedule rather than a strict maximum age.
No backups are taken through the VPS provider’s backup service. Email correspondence is retained in Google Workspace for seven years. The Apache rotation schedule does not apply to Cloudflare or email.
Cloudflare’s current documentation lists up to 31 days of history for the Security Events data available on its Free plan. These records help investigate requests flagged or acted on by security features. This is a product-specific retention period, not a guarantee that every category of information processed by Cloudflare is deleted within 31 days. See Cloudflare Security Events and Cloudflare’s privacy policy. I do not currently enable separate Cloudflare HTTP request-log storage or use Cloudflare Workers for this website.
The retention schedule must account for the information’s purpose: diagnosing faults and investigating security events for technical logs; resolving an enquiry and necessary follow-up for correspondence; and meeting applicable obligations for rights-request records. This notice will be updated as any outstanding retention details are confirmed.
Your data-protection rights
Depending on the circumstances, you may ask to access your personal information, correct it, erase it, restrict its use or receive a portable copy. You may also object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of processing before withdrawal. These rights have conditions and exemptions.
Email [email protected] to make a request. Information reasonably needed to confirm your identity or clarify the request may be required. Rights requests are normally answered without undue delay and within one month, subject to the applicable rules on clarification, extensions and exemptions.
Questions and complaints
You can raise a data-protection complaint with Brianna Kennedy at [email protected]. Please explain the issue and the outcome you are seeking. Complaints will be acknowledged within 30 days, investigated without undue delay, and followed by information about the outcome.
You also have the right to complain to the UK Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint, call 0303 123 1113, or write to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Changes to this notice
This notice will be updated when the website’s handling of personal information changes. The date above identifies the latest revision. The relevant UK framework is the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003, as amended, including by the Data (Use and Access) Act 2025.