Privacy Policy

This Privacy Policy describes how the Jonathan F. Foster website ("we", "us", or "our") collects, uses, and protects personal information when you visit the website or contact us.

Last updated: 20 September 2026

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when you:

• Fill out our contact form (name, email, company, telephone, message)
• Ask to receive articles or other communications
• Request information about professional engagements
• Communicate with us via email or phone

1.2 Automatically Collected Information

Depending on the features you use and your analytics preference, we may collect:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referral source and exit pages
• Usage data through Google Analytics when analytics is not disabled

2. How We Use Your Information

We use your information to:

• Respond to your inquiries and contact requests
• Provide information about professional engagements
• Improve our website and user experience
• Send marketing communications (with your consent)
• Comply with legal obligations
• Prevent fraud and ensure website security
• Analyze website traffic and usage patterns

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., responding to inquiries)
• Legal Obligation: Processing is necessary to comply with the law

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your browsing experience:

Google Analytics

We use Google Analytics to understand how visitors use our website and improve our content and services. Analytics is on by default with analytics storage denied, so Google Analytics does not create analytics cookies unless you allow them.

• Number of visitors and their geographic location
• Pages viewed and navigation patterns
• Time spent on each page
• Device and browser information

Use the Analytics preferences control at the bottom of public pages other than the homepage to disable analytics completely or allow analytics cookies. Advertising storage, personalisation and Google signals remain disabled in both modes. Google Analytics also provides a browser opt-out add-on.

5. Data Sharing and Third Parties

We do not sell your personal information. We may share your data with:

• Service Providers: Google Analytics, email service providers, and hosting services
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (SSL/TLS)
• Secure server infrastructure
• Rate limiting to prevent abuse
• Spam detection on contact forms
• Regular security assessments
• Access controls and authentication

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form submissions: Up to 3 years from last contact
• Marketing communications: Until you unsubscribe
• Analytics data: As per Google Analytics retention settings
• Legal compliance: As required by applicable laws

8. Your Rights

Under GDPR and UK data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (right to be forgotten)
• Restriction: Limit how we use your data
• Portability: Receive your data in a structured format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at [email protected]

9. International Data Transfers

Your data may be transferred to and processed in countries outside the UK/EEA, including the United States (Google Analytics). We ensure appropriate safeguards are in place through:

• Standard Contractual Clauses
• Adequacy decisions
• Service provider certifications

10. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes

We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

13. Right to Lodge a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):