Privacy Policy

Privacy & Cookie Policy

Last updated: 17 December 2026

The Straylight is a sole trader business owned and operated by Penelope Longwood.

We are committed to protecting your privacy and handling your personal data (including through cookies and similar technologies) in a transparent, secure and lawful way in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR) (as amended).

This Privacy & Cookie Policy explains what personal information we collect, how we use it (including via cookies), who we share it with, how long we keep it, your rights, and how we manage cookies and similar tracking technologies.

1. Who we are (Data Controller)

Data Controller: Penelope Longwood trading as The Straylight
Business address: 33 SPRINGMOUNT RD, CLOUGH, BALLYMENA, UNITED KINGDOM
Email: me@thestraylight.com

We act as the data controller for the personal data we collect directly through this website.

2. What personal data we collect and how

We collect personal data in the following main ways:

1. Just visiting the website - Collected: IP address, browser & device details, pages viewed, approximate location - Method: automatically (cookies & similar tech) - Legal basis: legitimate interests + your consent for non-essential cookies

2. Watching embedded YouTube videos - Collected: viewing statistics, device info, IP address - Method: when the video player activates - Legal basis: legitimate interests + consent for tracking

3. Interacting with embedded Google Maps - Collected: rough location, device data, map interactions - Method: automatically on map display - Legal basis: legitimate interests

4. Sending us a message (contact form/email) - Collected: name, email, phone number (optional), message - Method: you provide it directly - Legal basis: consent or pre-contractual measures

5. Becoming a client - Collected: full name, address, contacts, project details, payment information - Method: provided during our collaboration - Legal basis: performance of contract, legal obligations

We do not knowingly collect special category (sensitive) personal data through this website.

3. Cookies & Similar Technologies – Detailed Information

We use cookies and similar technologies (such as pixels, tags, local storage) to make our website work, to understand how it is used, and to improve your experience.

What are cookies?
Cookies are small text files placed on your device (computer, tablet, phone) when you visit a website. They are widely used to make websites work or work more efficiently, as well as to provide information to the site owners.

We use the following categories of cookies:

- Strictly necessary cookies — Essential for the website to function properly (e.g., remembering your cookie preferences). These do not require consent under PECR.
- Performance / Analytics cookies — Collect information about how visitors use the site (e.g., most visited pages). Used to improve site performance.
- Functionality cookies — Remember choices you make (e.g., language, region) to provide enhanced features.
- Targeting / Advertising cookies — We do not currently use these.

Cookies we use

|--------------------------------|-----------------------|-------------------------------------------------------------------------|---------------------------|-----------------------|-------------------|

How we obtain consent for cookies
- On your first visit (and when consent expires or changes), you will see a cookie banner with clear options to Accept, Reject, or Manage preferences.
- Consent is obtained through a clear affirmative action (e.g. clicking “Accept” or selecting specific categories).
- You can withdraw or change consent at any time via the Cookie Settings link in the footer.
- Non-essential cookies (Analytics, YouTube tracking) are blocked until you give consent.
- Closing the banner without action = no consent for non-essential cookies.

For more on Google's data practices, see:
https://policies.google.com/privacy
https://policies.google.com/technologies/cookies

4. Third-party processors & international transfers

We use these third-party services (data processors):

- Google Analytics — website usage statistics
- YouTube — embedded video player
- Google Maps — embedded maps

Google Ireland Limited acts as processor. Some data may be transferred to the United States. Google participates in the EU-US Data Privacy Framework and we rely on their Standard Contractual Clauses + supplementary measures.

We have appropriate data processing agreements in place (Article 28 UK GDPR).

5. How long we keep your personal data

- Website analytics (anonymised) → up to 26 months (Google Analytics setting)
- YouTube / Maps interaction data → controlled by Google (see their policy)
- Contact form / email enquiries → up to 12 months after last contact
- Client contract data → 6 years after end of contract (legal/tax obligation)

After these periods we delete or irreversibly anonymise the data.

6. Your rights under UK GDPR

You have the following rights (subject to exceptions):

- Right to be informed
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
- Rights related to automated decision-making (we do not carry out such processing)

To exercise rights, contact us at me@thestraylight.com. We respond within one month.

You may also complain to the Information Commissioner’s Office (ICO):
https://ico.org.uk/make-a-complaint/

7. Security

We use appropriate technical and organisational measures to protect your data. However, no internet transmission is 100% secure.

8. Changes to this Policy

We may update this policy. Changes will be posted here with the updated date. Significant changes will be notified via website notice and/or email where appropriate.

9. Contact us

Penelope Longwood
The Straylight
Email: me@thestraylight.com

Thank you for visiting The Straylight.