Your privacy, respected.

This policy explains what information kaylea-thomas.com (the "site") collects when you visit, how it is used, and the choices you have. It is written in plain language and reflects the principles of the UK GDPR and the Data Protection Act 2018. Last updated: June 2026.

Who runs this site

kaylea-thomas.com is a personal website run by me, Kaylea Thomas. It is not a business. For any privacy questions or requests, please use the contact links on the site to get in touch.

What is collected

You can browse the site without creating an account or providing personal information. The site may automatically collect limited technical data such as browser type, device type, approximate region, and pages visited. If you choose to contact me, the information you share (such as your name, email address, and message) is processed only to reply to you.

How it is used

Information is used to operate and improve the site, to respond to your messages, to understand which content is helpful, and to keep the site secure. It is not sold, rented, or used to build advertising profiles.

Legal bases

Processing relies on legitimate interests (running and improving a personal website), consent (for any non-essential cookies), and your explicit request (when you contact me).

Sharing & subprocessors

The site is hosted on the Lovable platform, which provides hosting, deployment, and the underlying database used to store site content. Where relevant, third-party providers may also be used to deliver email replies or analytics. These providers process data on my behalf under their own terms.

Retention

Messages and contact details are kept only as long as needed to reply and maintain reasonable records of the conversation. Technical and analytics data is kept in aggregated or short-lived form.

Your rights

Under UK GDPR you have the right to access, correct, delete, or restrict use of your personal data, to object to processing, and to data portability. To exercise any of these rights, contact me via the site. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

International transfers

Some service providers may process data outside the UK. Where that happens, appropriate safeguards (such as standard contractual clauses) are relied on.

Changes to this policy

This policy may be updated from time to time. Material changes will be reflected on this page along with a new "last updated" date.