Where this policy applies

This policy only applies to the website located at https://www.ivormorgan.com. It may link to third-party websites. They will have their own privacy policy for which I am not responsible.

What personal data I collect and why I collect it


When visitors leave comments on the site I collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment. Additionally I may use the Akismet anti-spam service to help moderate comments left on this site. You can read Akismet’s privacy policy at https://akismet.com/privacy/

Contact and subscription forms

If you subscribe to this blog or use my contact form you will be providing your name and email address and possibly also your telephone number and the URL for your website. I also capture the IP address from which you sent the form.

Cookies and Log Information

This website uses “Cookies” and Google Tag Manager to identify the areas of the site that you visit. Most web browsers can be set to disable the use of Cookies. However, if you disable Cookies, you may not be able to access all of the information or functionality of this site. I never place personally identifiable information in cookies.

I automatically receive information from your web browser or mobile device. This information includes the name of the website from which you entered this site if any, the IP address of your computer/proxy server that you use to access this site, your web browser type, type of mobile device, language settings and computer operating system.

I may use all of this information to improve the performance, design or content of this site.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites have their own privacy and cookie policies.


Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of this site. This data is shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network. You can opt-out of having your activity on this site available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about your activity on this site. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: http://www.google.com/intl/en/policies/privacy/

When I share your data 

I may share your data with services to help me complete the following:

  1. Provide you with a newsletter if you have subscribed to receive it
  2. Provide a survey to users
  3. Analyse the use of this site and improve it’s functionality, design and content
  4. Moderate comments that are left on this site
  5. Display your Gravatar next to comments that you may make on this site
  6. Respond to requests or enquiries that you make
  7. Provide services that you have requested
  8. Comply with lawful requests to access your data


How long I retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This enables me to recognise and approve any follow-up comments automatically instead of holding them in a moderation queue. If you subscribe to my newsletter I retain your data for the duration of your subscription save that I retain your email address and a record of the IP address from which you originally subscribed indefinitely so that I can ensure that I can supress your email address from any email lists that I may subsequently acquire. If you send me a contact form or an email I will retain the information in that form or email indefinitely.

Information regarding your data protection rights under the General Data Protection Regulation (GDPR)

For the purpose of this Privacy Policy, I am a Data Controller of your personal information.

If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information, as described in this Privacy Policy, depends on the information I collect and the specific context in which I collect it. I may process your personal information because:

  • You have given me permission to do so by leaving a comment on this site, by subscribing to my newsletter or by submitting a contact form or sending me an email
  • The processing is in my legitimate interests and it’s not overridden by your rights
  • To comply with the law

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. In certain circumstances, you have the following data protection rights:

  • The right to request deletion. This does not include any data I am obliged to keep for administrative, legal, or security purposes.
  • The right of rectification. You can ask that incorrect information that I hold about you is corrected.
  • The right to object. You can object to my processing of your data. This does not include any processing that is required to comply with your request.
  • The right of restriction. You can restrict the purposes for which I process your data. This does not include any processing that is required to comply with your request.
  • The right to data portability. You can request to receive an exported file or printed record of the personal data I hold about you, including any data you have provided to me. 
  • The right to withdraw consent. You can withdraw consent for me to process your data. This does not include any processing that is required to comply with your request.

Please note that I will ask you to verify your identity before responding to such requests.

You have the right to complain to a Data Protection Authority about my collection and use of your personal information. For more information, please contact your local data protection authority in the European Economic Area (EEA).

“Do Not Sell My Personal Information” notice for California consumers under California Consumer Privacy Act (CCPA)

Under the CCPA, California consumers have the right to:

  • Request that a business that collects a consumer’s personal data disclose the categories and specific pieces of personal data that a business has collected about consumers. This information is described above.
  • Request that a business delete any personal data about the consumer that a business has collected.
  • Request that a business that sells a consumer’s personal data, not sell the consumer’s personal data. 

If you make a request under GDPR or CCPA , I have thirty-days to respond to you. If you would like to exercise any of these rights, please contact me by using the contact form.

You want to talk!

Photo by Ben White on Unsplash

that's so cool!


You Subscribed!

I’m so pleased that you have subscribed to my newsletter

You will be able to unsubscribe at any time from the newsletter (though I hope you won’t) and I promise no spam and I won’t share your data with anyone.