Privacy Policy

1. Who this covers

Mclean Stewart is the trading name behind mcleanstewart.co.uk. I am Jack Stewart, I build the site and I am the person you would be dealing with. This policy covers what happens when you visit it.

2. What the site collects from you

Nothing you type. There is no contact form, no newsletter signup and no field anywhere on the public site that sends data to me.

Two things are stored, and both stay on your own device unless you choose otherwise:

• Your cookie choice. When you accept or decline on the banner, that answer is saved in your browser’s local storage. It never leaves your device and I cannot see it.
• Analytics, but only if you accept. Covered in the next section.

3. Cookies and analytics

If you accept on the cookie banner, the site loads Google Analytics. Until then no analytics script loads at all, and declining keeps it that way. There is nothing to opt out of if you never opted in.

When it does load, Google Analytics sets its own cookies and records page-level information: which pages you viewed, the site or search that sent you here, and your browser and device type. I have IP anonymisation switched on, so Google truncates your address before storing it. Google processes that data under its own privacy policy.

To change your answer, clear this site’s stored data in your browser. The banner will ask again.

4. The login area

Part of this site sits behind a sign in and only I use it. There is no public registration. If you are not signed in you cannot reach it.

Signing in sets session cookies through Supabase so the login holds between pages. Those are strictly necessary for it to work and play no part in analytics.

5. Enquiries sent to the older site

An earlier version of this site had a contact form, and submissions were written to a database table hosted by Supabase. The form and the endpoint behind it have been removed, so nothing new is being recorded. I can still read what was recorded before.

If you sent an enquiry through the old form and you want that record deleted, email me and I will delete it.

6. Services the site relies on

• Vercel, which hosts the site and serves every page of it.
• Google Analytics, which runs only after you accept on the banner.
• Supabase, which provides the database and the sign in behind the login area.

Each of these has its own privacy policy governing what it does with anything it processes.

7. Security

The login area is behind authentication and cannot be reached without it. Everything else is a set of pages with no inputs, so there is very little of yours here to protect in the first place.

8. Your rights

Under UK GDPR you have the right to ask me to:

• Tell you what personal data I hold about you
• Correct it if it is wrong
• Delete it
• Stop or restrict what I do with it
• Hand it over in a portable form
• Object to it being processed at all

Email jack@mcleanstewart.co.uk to use any of these. In practice, if you have never sent me anything, I hold nothing about you to show you or delete.

9. How long anything is kept

The only personal data I could be holding is in the old enquiry records described in section 5. Analytics data sits with Google for however long my Google Analytics property is configured to keep it.

10. Changes to this policy

If any of the above changes I will update this page and the date at the top of it.

11. Getting in touch

Questions about this policy, or anything else, go to jack@mcleanstewart.co.uk. That address is the only way to reach me here: there is no contact page and no phone number published on this site.