Last updated: 16 July 2026

Who runs this site

This site is operated by Neil Patterson-Azzopardi. You can contact me at .

This site is not affiliated with, endorsed by, or connected to Second Best Beer, BrewDog plc, or Computershare. It is an independent site.

For the purposes of UK data protection law, I am the data controller for the limited personal data described below. I am not required to appoint a Data Protection Officer and have not done so.

The letter generator

The tool on the home page builds a subject access request letter from the details you type in. It does this using JavaScript running on your own device.

There is no form submission. The name, email address and postal address you enter are never transmitted to this website, never written to a database, and never logged. They exist only in your browser's memory, and disappear when you close or reload the page.

When you use the "Open in my email app" button, your details are passed to your own email application via a standard mailto link. The email is then composed and sent by you, from your own account. I am not a party to it and never see it.

Because I do not receive this data, I cannot provide you with a copy of it, correct it, or delete it. There is nothing on my side to act on.

Visitor statistics

I use WP Statistics, a self-hosted analytics plugin. It runs on this website's own server and does not send anything to any third party. There is no Google Analytics here, and no advertising or marketing technology of any kind.

It records approximate visit information such as the pages viewed, the referring page, browser and device type, and a general location derived from your IP address at country level.

I have enabled both IP anonymisation and IP hashing. This means the final part of your IP address is discarded before anything is stored, and what remains is put through a one-way hash. Your full IP address is never written to this site's database, and the stored value cannot be reversed to identify you.

WP Statistics is configured to respect the Do Not Track setting in your browser. If you have that switched on, your visit is not recorded at all.

It sets no cookies.

Lawful basis: legitimate interests, under Article 6(1)(f) UK GDPR. My interest is in understanding, in aggregate, how much this site is being used. The data is anonymised at the point of collection and cannot be used to identify or profile anyone, so the impact on your privacy is minimal.

Retention: aggregate statistics are held for 18 months and then deleted.

Server logs

My hosting provider, Krystal Hosting Ltd, automatically records technical information whenever anyone visits any site they host, including this one. This typically includes your IP address, the date and time of the request, the pages requested, your browser type, and the referring page.

An IP address can count as personal data under UK GDPR, so I am being upfront about this rather than claiming the site collects nothing at all.

I do not read these logs routinely and do not use them to identify or profile anyone. They exist because they are a standard part of running a web server and are needed to keep the site available and secure.

Lawful basis: legitimate interests, under Article 6(1)(f) UK GDPR, in operating a functioning and secure website.

Retention: logs are held by Krystal under their own retention schedule and deleted automatically. I do not extract, copy, or keep them separately. Krystal's own privacy policy is at krystal.uk/legal/privacy-policy.

Fonts

The typefaces on this site are served from this website's own server. Although they originate from the Google Fonts library, no request is made to Google when you load a page here, and your IP address is not disclosed to Google. I did this deliberately.

Cookies

This site sets no cookies. There is no analytics cookie, no advertising, no tracking pixel, and no social media embed. That is why you are not being asked to accept anything.

WordPress stores one technical value in your browser's session storage, recording whether your browser can display emoji. It contains no personal data, is not used to track you, and is discarded when you close the tab.

The sharing buttons on this site are plain links. They only contact the relevant service if you click one, at which point that service's own privacy policy applies, not mine.

What I do not do

• I do not build a mailing list.
• I do not contact you.
• I do not sell, rent, or share personal data with anyone.
• I do not use third-party analytics or advertising technology.
• I do not profile visitors or make automated decisions about them.

Your rights

Under UK GDPR you have the right to access your personal data, to have it rectified or erased, to restrict or object to its processing, and to data portability. Where processing relies on legitimate interests, you have the right to object to it.

In practice there is very little here to exercise those rights against. The letter generator sends me nothing. The visitor statistics are anonymised at the point of collection, so I cannot link them back to you even if you ask me to. The only identifiable data connected with this site sits in my host's server logs.

If you want to exercise any right in relation to those logs, contact me at with enough detail to locate the relevant entries, such as the approximate date and time of your visit and your IP address at the time. Without that I am unlikely to find anything.

I will respond within one month.

Complaints

If you are unhappy with how I have handled your personal data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or by calling 0303 123 1113. I would appreciate the chance to put things right first, but you do not have to come to me before going to the ICO.

Changes

If I change this policy I will update the date at the top. Any substantive change will be flagged on the home page.