Privacy policy.

Last updated: 27 July 2026

This Privacy Policy explains how Milan Ehrhardt ("I", "me", "my") collects, uses, and protects personal information when you visit www.milanehrhardt.com (the "Site") or contact me through it. I am the data controller for the personal data described here. I am committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who I am and how to contact me

For any questions about this policy or your personal data, contact me through the contact button on my website.

2. What personal data I collect

I collect personal data in the following ways:

Information you give me directly. When you use the contact form or email me, I collect your name, email address, and any information you choose to include in your message.

Information collected automatically. When you visit the Site, certain data is collected automatically through cookies and similar technologies, including your IP address, browser type, device information, pages visited, time spent on the Site, and referring website. This is standard analytics data used to understand how the Site is used.

The Site is hosted on Squarespace, which processes certain data on my behalf as part of providing the hosting, analytics, and form services.

3. Why I collect it and the legal basis

I process your personal data for the following purposes, relying on the following legal bases under UK GDPR:

To respond to your enquiries and communicate with you. Legal basis: legitimate interests, namely responding to people who contact me, and where relevant taking steps at your request prior to entering any arrangement.

To operate, maintain, and improve the Site, including understanding usage through analytics. Legal basis: legitimate interests in running and improving my website, and, for non-essential cookies, your consent.

To comply with legal obligations where applicable. Legal basis: legal obligation.

4. Cookies

The Site uses cookies. Essential cookies are necessary for the Site to function and are set automatically. Non-essential cookies, including analytics cookies, are used only where permitted. You can control or disable cookies through your browser settings, though disabling essential cookies may affect how the Site works.

5. How I share your data

I do not sell your personal data. I share it only with:

Service providers who help me operate the Site, in particular Squarespace, which hosts the Site and processes data on my behalf as a data processor under appropriate terms. Google Analytics also provides insights.

Legal and regulatory authorities, where I am required to disclose data by law.

6. International transfers

Some of my service providers, including Squarespace, may process data outside the United Kingdom, including in the United States. Where personal data is transferred outside the UK, it is protected by appropriate safeguards such as the UK's International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision, as required by UK data protection law.

7. How long I keep your data

I keep personal data only for as long as necessary for the purposes described in this policy. Enquiry and correspondence data is kept for as long as needed to deal with your enquiry and any follow-up, and then deleted or retained only where I have a legitimate reason or legal obligation to do so. Analytics data is retained in line with the retention periods of the analytics tools used.

8. Your rights

Under UK data protection law you have the right to: access the personal data I hold about you; request correction of inaccurate data; request erasure of your data; restrict or object to processing; request portability of your data; and, where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, contact me through the contact page on my website. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's supervisory authority, at www.ico.org.uk or by calling 0303 123 1113.

9. Security

I take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. The Site is hosted on Squarespace, which maintains its own security measures. However, no method of transmission over the internet is completely secure, and I cannot guarantee absolute security.

10. Children

The Site is not directed at children, and I do not knowingly collect personal data from anyone under 16.

11. Changes to this policy

I may update this policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.