Privacy Policy
Last updated June 2026.
Who I am
I am Kenn Jordan, sole proprietor of ElmsPark, working from a rural studio in Carrickbyrne, County Wexford, Ireland. I am the data controller for any personal data submitted through this site.
What I collect
This site collects only the information you submit through the contact form on the audit-request page. That is your name, email address, an optional website URL, and the text of your enquiry.
I do not run third-party analytics, advertising trackers, or marketing scripts. The only cookie this site sets is a functional session cookie used by the underlying CMS to keep me signed in to the admin while I am working. See the Cookie Policy for details.
Why I collect it
The legal basis for processing your contact form submission is legitimate interest. You initiated the enquiry, I respond to it. The data is used only to read your message and reply.
Where it is stored
Form submissions are held on a server hosted by IONOS, inside PageMotor, the CMS this site runs on. They are not shared with any third party, except that the text of your submission is screened for spam as described below.
Automated spam filtering
To keep my inbox clear of junk, the text of each contact form submission is automatically screened by an AI service (Anthropic’s Claude) that classifies it as a genuine enquiry or spam. Anthropic processes the text only to return that classification and does not use it to train its models. Genuine enquiries reach me as normal; messages identified as spam are held in a quarantine for review and deleted after 30 days.
How long I keep it
Enquiries that turn into a paid commission are kept for the duration of that engagement plus seven years for accounting purposes. Enquiries that do not result in work are deleted within 90 days of the last contact, unless you ask me to delete them sooner.
Your rights
Under the EU General Data Protection Regulation and the UK Data Protection Act 2018, you have the right to:
- Request access to the data I hold about you
- Request correction of inaccurate data
- Request erasure of your data
- Request portability, a copy of your data in a common format
- Withdraw consent or object to processing
Data Protection Request
Use this form to exercise your data protection rights under the GDPR. We will process your request within 30 days.
Complaints
If you are not satisfied with how I have handled your data, you can complain to the Information Commissioner’s Office in the UK, the Data Protection Commission in Ireland, or your local data protection authority.