This privacy notice explains how Keys and Kettle (www.keysandkettle.co.uk) handles personal data. It is written with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR) in mind.
Who is responsible
The data controller is Chloe Hartley, who writes and runs this blog from Sheffield. You can contact me about anything in this notice at partner@keysandkettle.co.uk.
What we collect and why
- E-mails you send. If you e-mail us, I use your name, e-mail address and message to reply. The lawful basis is legitimate interests (answering your message). Correspondence is kept for up to 12 months, or longer only where it relates to a business arrangement and needs to be kept for accounting.
- Technical data. When you visit, our hosting and security provider processes your IP address, browser details and the pages requested so the site can be delivered and protected from abuse. This is also a legitimate interest. These logs are kept by the provider for a short period and are not used to identify you.
- The newsletter box. The newsletter sign-up form doesn't currently send or store anything. If we start a newsletter, we'll update this notice first and will only add you with your consent.
There are no comments, user accounts, analytics profiles or advertising trackers on this site, the fonts are served from our own domain, and we never sell personal data.
Cookies and similar technologies
We don't set advertising or analytics cookies. The site remembers that you've dismissed the cookie notice using your browser's local storage, which is strictly necessary and holds no personal data. Our security provider may set a strictly necessary cookie to help block malicious traffic.
Some posts may contain affiliate links. If you click one, the website you land on may set its own cookies to record that you came from here. That happens on their site and is covered by their privacy policy, not this one.
Where data is processed
Our hosting and security provider may process technical data outside the UK. Where it does, the transfer relies on UK adequacy regulations or the International Data Transfer Addendum.
Your rights
Under UK GDPR you have the right to access the personal data held about you, to have it corrected or erased, to restrict or object to its use, and to data portability. To use any of these rights, e-mail the address above and I'll reply within one month. If you're unhappy with how your data has been handled, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this notice
This notice was last updated in October 2026. If anything changes, the new version will be published on this page.