Privacy Policy

Last updated: 1 January 2026 | Effective date: 1 January 2026

AllThingsEmbassy ("we", "us", "our") is committed to protecting the privacy and personal data of our visitors. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at www.allthingsembassy.com (the "Website"). This policy complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Data Controller

The data controller for this Website is AllThingsEmbassy. If you have questions about this policy or your personal data, please contact us via our contact page.

2. What Data We Collect

2.1 Information You Provide

When you use our contact form, you may provide us with:

Your name
Your email address
The content of your message

We only collect this information when you voluntarily submit it through our contact form. We do not require you to create an account or provide personal information to browse our Website.

2.2 Automatically Collected Information

When you visit our Website, we may automatically collect certain technical information, including:

IP address (anonymised where possible)
Browser type and version
Operating system
Pages visited and time spent on each page
Referring website (the page you came from)
Date and time of your visit
Device type (desktop, mobile, tablet)

This information is collected through cookies and similar technologies, as described below.

3. How We Use Your Data

We use the information we collect for the following purposes:

Responding to enquiries: To respond to messages submitted through our contact form. Legal basis: legitimate interest.
Website analytics: To understand how visitors use our Website, which pages are most popular, and how we can improve the user experience. Legal basis: legitimate interest.
Advertising: To display relevant advertisements through Google AdSense. Legal basis: consent (via cookie consent).
Website security: To protect our Website from malicious activity, spam, and abuse. Legal basis: legitimate interest.

4. Cookies

4.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help the website remember information about your visit, such as your preferences, and can make your next visit easier and more useful.

4.2 Cookies We Use

Essential cookies: Required for the Website to function correctly. These cannot be disabled.
Analytics cookies: Help us understand how visitors interact with our Website by collecting and reporting information anonymously. We may use Google Analytics for this purpose.
Advertising cookies: Used by Google AdSense and its partners to serve advertisements relevant to your interests. These cookies may track your browsing activity across different websites.

4.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or set preferences for certain websites. Please note that disabling cookies may affect the functionality of the Website.

5. Third-Party Services

5.1 Google AdSense

We use Google AdSense to display advertisements on our Website. Google AdSense uses cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our Website and other sites on the Internet. You may opt out of personalised advertising by visiting Google Ads Settings.

5.2 Google Analytics

We may use Google Analytics to analyse website traffic. Google Analytics uses cookies to collect information about how visitors use our Website. The information generated is transmitted to and stored by Google. For more information, see Google's Privacy Policy.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information with:

Service providers: Third-party services that help us operate the Website (hosting, analytics, advertising), who process data on our behalf under contractual agreements.
Legal requirements: If required by law, regulation, legal process, or government request.

7. Data Retention

Contact form submissions are retained for up to 12 months to allow us to respond and follow up. Analytics data is retained in accordance with Google Analytics' default retention settings. You may request deletion of your data at any time by contacting us.

8. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can request that we correct any inaccurate or incomplete data.
Right to erasure: You can request that we delete your personal data ("right to be forgotten").
Right to restrict processing: You can request that we limit how we use your data.
Right to data portability: You can request a copy of your data in a structured, machine-readable format.
Right to object: You can object to the processing of your data for certain purposes, including direct marketing.
Right to withdraw consent: Where processing is based on consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact us via our contact page. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Website is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

11. International Transfers

Some of our third-party service providers (including Google) may process data outside the UK. Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data in accordance with UK GDPR requirements.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically to stay informed about how we protect your data.

13. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. You can contact the ICO at ico.org.uk or by telephone on 0303 123 1113.