Privacy Policy
Last updated: 24 August 2026
This policy explains how Tommy McDevitt Marketing collects and uses personal information when you visit this website, submit an enquiry or communicate about its services.
Who is responsible for your information?
Thomas McDevitt, trading as Tommy McDevitt Marketing, is the data controller for the personal information described in this policy.
What information is collected?
Information you provide
When you submit an enquiry form or contact me directly, I may collect:
- your name
- your email address
- the name of your business or organisation
- your website address
- what you would like help with
- your approximate budget or intended level of investment
- any other information you choose to include in your message
- subsequent correspondence about your enquiry or work we undertake together
Please do not include sensitive personal information in an enquiry unless it is genuinely necessary.
Information collected when you use the website
The website and its service providers may process limited technical information such as:
- your IP address
- browser and device type
- requested pages, dates and times
- referring pages
- security, diagnostic and server-log information
- your cookie and consent preferences
If you consent to Analytics cookies, Google Analytics also collects information about how people reach and use the website. More information is available in the Cookie Policy.
Information connected with client work
If you become a client, I may also process the information needed to provide and administer the service, including project correspondence, access details you choose to provide, reports, invoices, payment records and contractual information.
Comments and user accounts
This website does not allow public comments or visitor account registration. It therefore does not collect comment data, create public visitor profiles or send visitor email hashes to Gravatar.
How and why is your information used?
To respond to enquiries and assess whether I can help
I use the information you provide to understand your enquiry, inspect the business or website you have asked me to look at, respond to you and decide whether the work is a sensible fit.
The lawful bases are taking steps at your request before entering into a contract and my legitimate interests in responding to genuine business enquiries and managing prospective client relationships.
To provide and manage services
If we agree to work together, I use relevant information to deliver the service, communicate with you, provide reports or recommendations, administer the engagement and take payment.
The lawful bases are performance of a contract and, where appropriate, compliance with legal obligations.
To operate, protect and improve the website
Technical and security information may be used to deliver pages, diagnose errors, prevent spam or abuse, maintain website security and understand technical performance.
The lawful basis is my legitimate interest in operating a reliable and secure business website.
To understand website usage
If you accept Analytics cookies, I use Google Analytics to understand matters such as which pages people visit, how visitors find the website and how the website is used.
The lawful basis is your consent. You can refuse or withdraw this consent without affecting your ability to use the website. See the Cookie Policy for instructions.
To maintain business and legal records
I may retain correspondence, contracts, invoices and related records for accounting, tax, legal, fraud-prevention and dispute-resolution purposes.
The lawful bases are compliance with legal obligations and my legitimate interests in maintaining accurate business records and protecting legal rights.
Marketing communications
Submitting an enquiry does not subscribe you to a mailing list. I may respond to your enquiry and follow up about the matter you contacted me about, but I will not use the enquiry form to add you to unrelated promotional emails.
If a newsletter or other marketing subscription is introduced later, it will use a separate sign-up process and appropriate privacy information.
Who receives your information?
I do not sell or rent personal information.
Information may be processed by trusted service providers where this is necessary to operate the website and business, including:
- website hosting, caching, security and backup providers, including Namecheap/EasyWP
- WordPress and website form software, including WPForms
- email and business-communication providers
- consent-management software, including WPConsent
- website analytics services, including Google Analytics, where you have consented
- accountants, legal advisers, insurers or other professional advisers where necessary
- public authorities, regulators, courts or law-enforcement bodies where disclosure is required by law or necessary to protect legal rights
Service providers are only given the information needed for their role and are expected to protect it appropriately.
International transfers
Some technology providers operate internationally and may process information outside the United Kingdom.
Where personal information is transferred internationally, I rely on providers that use recognised transfer safeguards where required, such as UK adequacy regulations, approved contractual clauses or the UK extension to an applicable data-privacy framework. You may contact me if you would like more information about the safeguards relevant to a particular provider.
How long is information kept?
Information is kept only for as long as reasonably necessary for the purpose for which it was collected.
- Enquiries that do not become client engagements are normally retained for up to 24 months after the last meaningful contact.
- Client correspondence, contracts and project records may be retained for up to six years after the engagement ends where needed for contractual, accounting, tax or legal purposes.
- Analytics information is retained according to the settings applied within Google Analytics and may be aggregated or anonymised for longer-term reporting.
- Consent preferences and consent records are retained for as long as needed to remember your choices and demonstrate compliance.
- Technical and security logs are retained according to the needs and settings of the relevant hosting or security provider, or for longer where needed to investigate an incident.
Information may be deleted sooner when it is no longer required. It may be retained for longer if a legal obligation, dispute, fraud concern or security incident requires it.
How is information protected?
Reasonable technical and organisational measures are used to protect personal information. These include encrypted website connections, controlled administrative access, software updates and the security measures provided by the website’s hosting and service providers.
No internet service can guarantee absolute security, but access is limited to people and providers that reasonably need it.
Your data-protection rights
Depending on the circumstances, you may have the right to:
- ask for a copy of your personal information
- ask for inaccurate or incomplete information to be corrected
- ask for information to be deleted
- ask for processing to be restricted
- object to particular uses of your information
- receive certain information in a portable format
- withdraw consent at any time where processing relies on consent
You have the right to object to processing based on legitimate interests. If you object, I will stop that processing unless there are compelling legitimate reasons to continue or the information is needed for legal claims.
These rights are not absolute and may depend on the circumstances and lawful basis involved. To exercise a right, email tommy@tommymcdevittmarketing.co.uk. I may need to confirm your identity before disclosing or changing personal information.
Automated decision-making
I do not use the personal information collected through this website to make solely automated decisions that have legal or similarly significant effects on you.
Is providing information compulsory?
You do not have to submit an enquiry. However, I need at least enough information to understand the request and reply to you. Required form fields are marked accordingly. If required information is not provided, I may be unable to respond or assess the enquiry.
Complaints
Please contact me first if you have a concern about how your information has been handled. I will try to resolve it.
You also have the right to complain to the UK Information Commissioner’s Office. Information about doing so is available at ico.org.uk/make-a-complaint/.
External websites
This website links to external websites and projects. Their owners are responsible for their own privacy practices. This policy does not apply after you follow a link to another website.
Changes to this policy
This policy may be updated when the website, services, providers or legal requirements change. The latest version will always appear on this page with its revision date.
Contact
For questions about this policy or the use of your personal information, contact:
Thomas McDevitt, trading as Tommy McDevitt Marketing
tommy@tommymcdevittmarketing.co.uk