Dewi vs Goliath
Privacy Policy
Last updated: May 2026
DEWIVSGOLIATH CYF (trading as Dewi vs Goliath) is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights as a visitor to our website or a client of our services.
We are based in Bridgend, Wales, and operate under UK GDPR and the UK Data Protection Act 2018. If you have any questions about this policy, you can contact us at dafydd@dewivsgoliath.com.
1. Who We Are
Data Controller: DEWIVSGOLIATH CYF
Registered Address: Pen-y-bont ar Ogwr (Bridgend), Wales
Email: dafydd@dewivsgoliath.com
Phone / WhatsApp: +44 7510 843268
For any data protection queries, please contact us using the details above.
2. What Personal Data We Collect
When you visit our website, our hosting platform (Squarespace) automatically collects:
Information about your browser, network and device
Web pages you visited before arriving at this website
Web pages you view while on this website
Your IP address
Clicks, internal links, scrolling behaviour and timestamps
When you submit our contact form, we collect:
Your first and last name
Your email address
The content of your message
When you book a consultation or meeting, we may collect:
Your name and email address
Your phone number
Details relating to your appointment
When you sign up for marketing emails, we collect:
Your email address
Any other information you voluntarily provide
3. How We Use Your Data
We use your personal data for the following purposes:
To operate and improve our website
To respond to your enquiries and contact form submissions
To book and manage consultations
To send you marketing emails (only where you have consented or we have a legitimate interest to do so)
To comply with legal obligations
To understand how visitors use our website via analytics
4. Our Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases:
Legitimate interests — for website analytics, responding to enquiries, and business development
Consent — for non-essential cookies and marketing emails
Contract — where processing is necessary to deliver services you have engaged us for
Legal obligation — where we are required to process data by law
5. Cookies
Our website uses cookies — small files that are downloaded to your device when you visit. We use:
Necessary cookies — always active, required for the website to function correctly. These are set by Squarespace, our hosting platform.
Analytics and performance cookies — used to understand site traffic and activity, only when you acknowledge our cookie banner.
You can manage your cookie preferences at any time via our cookie banner or your browser settings. For full details of the cookies Squarespace places on our site, visit: https://support.squarespace.com/hc/en-us/articles/360001264027
6. Third-Party Services
We use the following third-party services which may receive your personal data:
Squarespace — Our website hosting and analytics provider. Squarespace processes data in accordance with their privacy policy: https://www.squarespace.com/privacy
Google Fonts / Adobe Fonts — Used to display fonts on our site. These services may receive your browser information and IP address when rendering fonts.
Social Media Platforms — Our site includes links and social sharing functionality for Facebook, Instagram and LinkedIn. If you interact with these features, those platforms may collect data in accordance with their own privacy policies.
Google — We may use Google services (including Google Analytics and the Google Places API at checkout). Google processes data in accordance with their privacy policy: https://policies.google.com/privacy
Calendly / Booking Tool — If you book a meeting via our booking system, that provider will also collect and process your appointment data. Please refer to their privacy policy for details.
We do not sell your personal data to third parties.
7. How Long We Keep Your Data
We only retain your personal data for as long as necessary for the purposes set out in this policy:
Contact form submissions: retained for up to 2 years, or until no longer relevant to a business relationship
Client data: retained for the duration of our contract and for up to 6 years thereafter in line with UK legal requirements
Marketing email data: retained until you unsubscribe or request deletion
Website analytics: as determined by Squarespace's data retention policies
8. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
The right to access — you can request a copy of the data we hold about you
The right to rectification — you can ask us to correct inaccurate data
The right to erasure — you can request that we delete your data ('right to be forgotten')
The right to restrict processing — you can ask us to limit how we use your data
The right to data portability — you can request your data in a portable format
The right to object — you can object to us processing your data on the basis of legitimate interests
Rights relating to automated decision-making — we do not use solely automated decision-making or profiling
To exercise any of these rights, please contact us at dafydd@dewivsgoliath.com. We will respond within 30 days.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at https://ico.org.uk or by calling 0303 123 1113.
9. Marketing Emails
Where you have given us permission, we may send you marketing emails about our services, news and offers. You can unsubscribe at any time by clicking the unsubscribe link at the bottom of any marketing email, or by contacting us directly at dafydd@dewivsgoliath.com.
10. Data Security
We take data security seriously. We use Squarespace's secure hosting platform and take reasonable precautions to protect your personal data from unauthorised access, loss, misuse or disclosure. However, no method of internet transmission is 100% secure, and we cannot guarantee absolute security.
11. Links to Other Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend you read their privacy policies before providing any personal information.
12. Changes to This Policy
We may update this privacy policy from time to time. When we do, we'll update the 'Last updated' date at the top of this page. We encourage you to review this policy periodically.
13. Contact Us
If you have any questions, concerns or requests regarding this privacy policy or your personal data, please get in touch:
DEWIVSGOLIATH CYF (Dewi vs Goliath)
Bridgend, Wales
Email: dafydd@dewivsgoliath.com
Phone / WhatsApp: +44 7510 843268
Website: www.dewivsgoliath.com