Privacy Policy

Last updated: May 2026

This privacy policy explains how Sunny Matharu (“I”, “me”, “my”) collects, uses, and protects your personal data when you visit sunny-matharu.co.uk (“this website”). I take your privacy seriously and handle your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


Who is responsible for your data

The data controller for this website is Sunny Matharu. If you have any questions about how your data is handled, you can contact me via the contact form on this website.


What data I collect and why

Contact form submissions
When you use the contact form on this website, I collect your name, email address, phone number (if provided), and the contents of your message. This information is used solely to respond to your enquiry. The legal basis for processing this data is legitimate interests — specifically, to respond to a request you have made.

Website analytics
This website may collect anonymised data about how visitors use the site, including pages visited, time spent on pages, and the device and browser used. This data does not identify you personally and is used to understand how the site is performing and how it can be improved.

Cookies
This website uses cookies. A cookie is a small text file stored on your device when you visit a website. The cookies used on this site include functional cookies required for the site to work correctly, and cookies set by Google reCAPTCHA (see below).


Google reCAPTCHA

This website uses Google reCAPTCHA v3 to protect the contact form from spam. reCAPTCHA works by collecting information about how you interact with the website and sending this to Google to assess whether you are a human or an automated bot. This may include your IP address and browser information.

This data is processed by Google in accordance with their privacy policy, which can be found at policies.google.com/privacy. By using the contact form, you acknowledge that your interaction with it is subject to Google’s privacy policy and terms of service.


How long I keep your data

Enquiries submitted via the contact form are retained only for as long as necessary to respond to and follow up on your request. If no ongoing business relationship is established, contact data is deleted within 12 months of the last communication.


Who I share your data with

I do not sell, rent, or share your personal data with third parties for marketing purposes. Your data may be shared with the following third parties only where necessary to operate this website:

Google — for reCAPTCHA spam protection and website analytics. Google may process data outside the UK. Where this occurs, appropriate safeguards are in place under Google’s standard contractual clauses.

Hosting provider — this website is hosted on a third-party server. Your data may pass through this infrastructure as part of normal website operation.


Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access — you can request a copy of the personal data I hold about you.

Right to rectification — you can ask me to correct any inaccurate or incomplete data.

Right to erasure — you can ask me to delete your personal data where there is no legitimate reason for me to continue holding it.

Right to restrict processing — you can ask me to limit how I use your data in certain circumstances.

Right to object — you can object to the processing of your personal data where I am relying on legitimate interests as the legal basis.

Right to data portability — where processing is based on your consent or a contract, you can request your data in a structured, machine-readable format.

To exercise any of these rights, please get in touch using the contact form on this website. I will respond within one month of receiving your request.


Complaints

If you are unhappy with how I have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

You can contact the ICO at ico.org.uk or by calling 0303 123 1113.


Changes to this policy

I may update this privacy policy from time to time. Any changes will be posted on this page with an updated date at the top. I encourage you to check this page periodically.