Your information
Privacy & Cookies
This notice explains how information is handled when you visit Richard Stephenson’s website or contact him through it.
Last updated:
- No advertising trackers or visitor analytics are installed.
- The website has no contact form, account registration or checkout.
- Fonts and images are served with the website. Viewing a page does not request fonts from Google.
Who is responsible?
Richard Stephenson is responsible for this personal professional website and the handling of enquiries sent to him. For privacy questions or to exercise your rights, email rs@richardstephenson.co.uk.
This notice covers this website. YUDU, Sentinel, LinkedIn and The Grey Zone website have their own privacy information.
When you browse
Cloudflare hosts and protects the website. Delivering pages and detecting abuse involves technical information such as your IP address, the requested page, browser or device information and request timing. Cloudflare may also process security and traffic records under its service settings.
The website does not create a visitor account or a database of your browsing activity. Cloudflare’s platform processing is described in Cloudflare’s privacy policy.
When you get in touch
The email links open your own email application. Nothing is submitted to the website when you select a link. If you choose to send a message, Richard receives your email address, your message and any name, contact details or attachments you include.
This information is used to respond to your enquiry and handle related correspondence. Sending an enquiry does not subscribe you to a mailing list. Please provide only information relevant to your enquiry.
Why information is used and kept
The lawful basis for delivering and securing this website is legitimate interests: maintaining a reliable professional website and preventing misuse. For general enquiries, the legitimate interest is communicating with people who choose to contact Richard about his work.
Enquiry correspondence is kept while it is needed to answer the enquiry, deal with reasonable follow-up or maintain records required by law. The need to keep it depends on the subject of the correspondence and any continuing relationship. It is deleted when those purposes no longer apply.
The site does not keep a separate application database of visits. Hosting and security records follow the relevant service retention arrangements; Cloudflare explains its retention criteria in its privacy policy.
Service providers and international processing
Information is handled by providers needed to operate the site and deliver email, including Cloudflare and the email-service providers involved in correspondence. Information may also need to be disclosed where the law requires it. This website does not sell personal information.
Cloudflare operates internationally, so technical information may be processed outside the UK. Its data processing addendum explains the safeguards for applicable international transfers, including standard contractual clauses and the UK addendum. You can request information about relevant safeguards using the contact address above.
Your rights and choices
Depending on the circumstances, you can ask to see your personal information, correct it, have it deleted or restrict its use. Other rights may apply depending on the legal basis for the processing. Contact Richard using the email address above to make a request.
You can object to the use of your information where legitimate interests is the lawful basis. Explain your concern by email so it can be considered.
You can also raise a concern with the Information Commissioner’s Office, the UK data protection regulator. More information about your rights is available from the ICO.
Other websites and future changes
Following a link to a business, article, book website or social network takes you to another website, which handles information under its own policies. Those services are linked rather than embedded in this site.
This notice will be reviewed if the site’s features change. Optional tracking or other technologies requiring consent must not be enabled until the appropriate information and controls are in place.