Privacy notice

This notice explains what happens to personal data when you visit stephenlayton.com. It applies under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who is responsible

Stephen Layton, e-mail stephen@stephenlayton.com. Questions about this notice can be sent to that address.

Visiting the website

The website is hosted by Vercel Inc. When a page is requested, the server processes technical data such as your IP address, browser type and the time of the request, so that the page can be delivered and the site protected against misuse. These server logs are kept for a short time only. The legal basis is our legitimate interest in running a secure website (Article 6(1)(f) UK GDPR).

The public website sets no cookies and uses no advertising or tracking services. To understand which pages are read, we count page views without cookies: a daily changing, non-reversible code is formed from IP address and browser, so the same visitor is counted once per day. Neither the IP address nor the code can be traced back to you, and the counts are deleted after 400 days.

Contacting us

This website has no contact form. If you write to us or to the management by e-mail or telephone, your details are used only to answer you (Article 6(1)(b) and (f) UK GDPR) and are not passed on.

Films from YouTube and Vimeo

Films are shown with a preview image only. Nothing is loaded from YouTube or Vimeo until you press play and confirm. Only then does your browser connect to the provider (Google Ireland Ltd. for YouTube, Vimeo.com Inc.), which may set cookies and process your IP address under its own privacy policy. Films we host ourselves and audio excerpts are delivered from our own storage at Vercel.

Links to other websites

Links to Hyperion Records, Apple Music, Spotify, ticket agencies and social networks lead to services with their own privacy policies. Nothing is transferred to them until you follow such a link.

Transfers outside the UK

Vercel and Upstash (database of the administration area) may process data in the United States. Transfers are covered by the UK Extension to the EU-US Data Privacy Framework or by standard contractual clauses.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing and to data portability. Please write to the address above. You can also complain to the Information Commissioner's Office, ico.org.uk.

Last updated: October 2026