Contents
- Website Operator
- Information We Collect
- How We Use Your Information
- Lawful Bases for Processing
- Who We Share Information With
- International Data Transfers
- How Long We Keep Your Information
- Cookies
- Your Data Protection Rights
- How We Protect Your Information
- Children's Privacy
- External Websites
- Changes to This Privacy Policy
- Contact Us
1. Website Operator
Explored by Will is operated by William Evans. Under UK data protection law, William Evans is the data controller for personal information collected through this website.
Website: https://exploredbywill.com
For questions about this Privacy Policy, the use of your personal information, or your data-protection rights, please contact:
Email: data@exploredbywill.com
2. Information We Collect
We may collect personal information when you interact with Explored by Will, as described below.
Information you provide through the contact form
When you contact us through the website, we collect:
- Your name
- Your email address
- The contents of your message
Contact-form submissions are sent to us by email and are not stored as form entries within WordPress.
Information you provide when leaving a comment
When you leave a comment on the website, we collect:
- Your name
- Your email address
- The content of your comment
- Your IP address
- Information about your browser or device
Your name and comment may be displayed publicly on the website. Your email address will not be published. If you choose to do so, WordPress can save your name, email address and website in a cookie on your device. This is provided for your convenience so that you do not need to re-enter these details the next time you leave a comment. You can choose whether or not to use this feature.
Newsletter subscription information
When you subscribe to the Explored by Will newsletter, information is collected and processed through MailerLite. This may include:
- Your name
- Your email address
- The date and time of your subscription
- Your IP address and signup source
- Records showing when and how consent was provided
- Information about whether you open emails or click links within them
Website analytics
We use Google Analytics 4 to understand how visitors use the website and to help improve its content and performance. Subject to your cookie choices, Google Analytics may collect information such as:
- Pages viewed
- Links and buttons selected
- GPX files or other resources downloaded
- The date, time and duration of visits
- The website or search engine that referred you to Explored by Will
- Approximate geographic location
- Browser, operating system and device type
- General interaction and session information
- Online identifiers associated with analytics cookies or your device
We do not intentionally send names, email addresses, contact-form messages or other directly identifying information to Google Analytics. Analytics information is collected only after you have given the appropriate consent through the website’s cookie controls.
Security and fraud-prevention information
We use Wordfence Security to help protect Explored by Will from spam, malicious activity and unauthorised access. As part of this, Wordfence may process information such as IP addresses, browser details, requested URLs and login attempts where applicable.
Security logs, including Live Traffic records and login security information, are retained for up to 30 days to help detect, investigate and respond to potential security incidents. After this period, they are automatically removed unless they need to be retained for an ongoing investigation or to comply with a legal obligation.
Hosting and server information
The website is hosted by Hostinger. Hostinger may automatically record technical information when visitors access the website, including:
- IP addresses
- Dates and times of requests
- Requested pages and files
- Browser and device information
- Referring website addresses
- Server errors and security events
Hostinger retains server logs and website backups for operational, security and disaster recovery purposes in accordance with its own retention policies.
Cookie consent information
We use CookieYes to manage visitors' cookie preferences. CookieYes may record information such as:
- Your cookie consent choices
- The date and time your choices were made
- A unique consent identifier
- Technical information needed to remember your preferences
CookieYes also maintains a record of your consent choices for compliance purposes. Consent records are retained for one year. Further information about the cookies and similar technologies used on this website is provided in our Cookie Policy.
GPX and other file downloads
GPX files and other downloadable resources can be downloaded without creating an account or providing your name or email address. Where you have consented to analytics cookies, Google Analytics records when a downloadable file is accessed. This information is used to help us understand which resources are most useful to visitors and to improve the content available on Explored by Will. We do not maintain separate records of individual file download histories outside of Google Analytics.
Information we do not currently collect
Explored by Will does not currently:
- Allow visitors to create user accounts
- Process payments or online purchases
- Operate an affiliate programme
- Display third-party advertising
- Use embedded videos, maps, social-media posts or similar third-party content
This Privacy Policy will be updated if these features are introduced.
3. How We Use Your Information
We use personal information collected through Explored by Will only for the purposes described below.
Responding to enquiries
We use the name, email address and message provided through the contact form to:
- Read and respond to your enquiry
- Continue any necessary correspondence
- Keep an appropriate record of the enquiry
- Deal with complaints, requests or concerns relating to the website
Contact-form correspondence will normally be retained for up to 12 months after the enquiry has been resolved, unless it is necessary to retain it for longer for legal, security or administrative reasons.
Managing website comments
We use information submitted with comments to:
- Review and moderate comments
- Publish approved comments
- Identify and reduce spam or abusive content
- Contact a commenter where reasonably necessary in connection with their comment
- Maintain constructive discussion on the website
A commenter's name and approved comment may be displayed publicly. Their email address will not be published. Approved comments will normally remain visible for as long as the related article is published on Explored by Will, unless the comment is removed for moderation or administrative reasons. Comments that are rejected, identified as spam or deleted are retained only for as long as reasonably necessary to manage the website, investigate misuse, or comply with legal obligations before being permanently removed.
Providing the newsletter
Where you have subscribed, we use your information to:
- Add you to the Explored by Will mailing list
- Send newsletters, website updates and related content
- Send an automated welcome email after you subscribe
- Manage your subscription preferences
- Process unsubscribe requests
- Maintain records showing whether and when you subscribed
- Prevent further marketing emails from being sent after you unsubscribe
- Measure newsletter opens and link clicks to help us understand which content is most useful to subscribers and improve future newsletters
You can unsubscribe at any time using the link included in each newsletter or by contacting us. A single subscriber group is used within MailerLite to manage newsletter subscriptions as required by the website's integration with MailerLite. Subscribers are not otherwise grouped or segmented based on their interests, signup source or activity. Consent to receive the newsletter is requested separately and is not assumed simply because you have visited the website or accepted this Privacy Policy.
Understanding and improving the website
Subject to your cookie choices, we use Google Analytics 4 to:
- Understand which pages and articles are visited
- Measure general website traffic and visitor interaction
- Identify how visitors arrive at the website
- Measure downloads of GPX files and other downloadable resources
- Understand which types of content are most useful to visitors
- Identify technical or usability issues
- Improve the structure, performance and content of the website
Analytics information is used to identify general patterns and trends. We do not use Google Analytics to intentionally identify individual visitors. Google Analytics is not configured to collect demographic or interest information through Google Signals or advertising features. Downloads of GPX files and other downloadable resources are measured as analytics events where you have consented to analytics cookies.
Managing cookie preferences
We use CookieYes to:
- Display the website's cookie consent controls
- Record whether you have accepted or rejected different categories of cookies
- Remember your preferences on future visits
- Prevent non-essential technologies from being used before the appropriate consent has been provided
- Allow you to review or change your choices at any time
CookieYes maintains a record of cookie consent choices to help demonstrate that the website has respected visitors' preferences. These records include information such as your consent choices, the date and time your choices were made, a unique consent identifier and limited technical information associated with your visit. Consent records are retained for 1 year. For further information about the cookies used on this website, please see our Cookie Policy
Protecting the website and its visitors
We use technical information collected by Wordfence and Hostinger to:
- Detect suspicious or malicious activity
- Prevent unauthorised access to the website
- Block harmful requests, IP addresses and other security threats
- Investigate attempted attacks and security incidents
- Protect website files, administration areas and visitor information
- Reduce spam and automated abuse
- Maintain the security, integrity and availability of the website
Wordfence may process information such as IP addresses, browser details, requested URLs and login attempts (where applicable) to provide website security. Wordfence Live Traffic records are retained for 30 days. Other security records are retained only for as long as reasonably necessary to protect the website, investigate security incidents or comply with legal obligations.
Hostinger may also retain server and security logs for operational and security purposes in accordance with its own retention policies. Security information is used solely to protect and maintain the website. It is not used to profile visitors or monitor browsing activity for marketing purposes.
Operating and maintaining the website
We use limited personal and technical information where necessary to:
- Deliver website pages and files
- Operate website email services
- Maintain backups
- Diagnose errors
- Restore the website following a failure or security incident
- Maintain website performance and availability
- Carry out updates, maintenance and administration
Hostinger provides the website hosting, email, backup and content delivery services used for these purposes.
Providing GPX and other downloads
GPX files can be downloaded without registering for an account or joining the newsletter.
Where you have consented to analytics cookies, download activity may be used to:
- Measure how often files are downloaded
- Understand which routes and downloadable resources are most useful to visitors
- Improve future downloadable content
- Identify broken or inaccessible downloads
We do not require a name or email address in order to download a GPX file. We do not maintain a separate record of GPX file downloads. Download activity is measured only through Google Analytics where you have consented to analytics cookies.
Complying with legal and regulatory obligations
We may use or retain personal information where reasonably necessary to:
- Respond to a valid legal request
- Establish, exercise or defend legal claims
- Investigate misuse of the website
- Protect our legal rights or the rights of others
- Comply with applicable legal, regulatory or law-enforcement requirements
Using information for new purposes
We will not use personal information for a materially different purpose without first considering whether the new use is compatible with the purpose for which the information was originally collected. Where required, we will update this Privacy Policy and obtain fresh consent before beginning the new use.
4. Lawful Bases for Processing
UK data protection law requires us to have a lawful basis whenever we collect or use personal information. The lawful basis that applies depends on the reason the information is being used. The main lawful bases relied upon by Explored by Will are consent, legitimate interests and legal obligation.
Consent
We rely on your consent where you have made a clear and voluntary choice to allow a particular use of your information. This applies to:
- Sending the Explored by Will newsletter after you subscribe
- Using Google Analytics and other non-essential technologies
- Recording analytics information about GPX and other file downloads
- Using any other optional cookies or similar technologies that require consent
You can withdraw your consent at any time. You can unsubscribe from the newsletter by using the unsubscribe link included in each email or by contacting us at data@exploredbywill.com. You can withdraw or change your consent to analytics and other non-essential cookies through the website's cookie controls. Withdrawing your consent does not affect the lawfulness of any processing carried out before your consent was withdrawn.
Legitimate interests
We rely on legitimate interests where processing is reasonably necessary to operate, manage, improve or protect the website, and where those interests are not overridden by the rights and interests of visitors.
Our legitimate interests may include:
- Responding to messages and enquiries submitted through the website
- Keeping an appropriate record of correspondence
- Reviewing, moderating and publishing website comments
- Preventing and removing spam, abusive comments and malicious content
- Protecting the website against unauthorised access, attacks and other security threats
- Investigating suspicious activity and attempted misuse
- Blocking harmful requests, IP addresses or geographic sources
- Maintaining server logs and diagnosing technical problems
- Operating, maintaining, backing up and restoring the website
- Ensuring that website pages and downloadable resources remain available
- Understanding whether emails have been successfully delivered
- Maintaining records of newsletter unsubscribes so that further marketing messages are not sent
- Establishing, exercising or defending legal rights
When relying on legitimate interests, we consider:
- The purpose of the processing
- Whether using the information is necessary for that purpose
- What a visitor would reasonably expect
- The nature and sensitivity of the information
- The likely effect of the processing on the visitor
- Whether the purpose could reasonably be achieved in a less intrusive way
- The safeguards available to protect the visitor’s information
You have the right to object to processing based on legitimate interests. Further information about this right is provided in the section covering your data-protection rights.
Contact enquiries
When you submit a contact form, we normally rely on our legitimate interests in:
- Reading and responding to the enquiry
- Continuing relevant correspondence
- Resolving questions, complaints or concerns
- Maintaining a limited record of the communication
A visitor who deliberately sends an enquiry would reasonably expect their name, email address and message to be used for these purposes. Where an enquiry relates to steps requested before entering into an agreement, the lawful basis of contract may apply instead.
Website comments
We normally rely on legitimate interests to:
- Receive and review comments
- Moderate comments before or after publication
- Publish approved comments
- Prevent spam, abuse and misuse
- Maintain discussions attached to website content
A visitor chooses whether to submit a comment and is informed that their name and approved comment may be displayed publicly. We do not publish the commenter's email address. Approved comments normally remain published for as long as the related article remains available on the website, unless they are removed for moderation, legal or administrative reasons.
Newsletter subscriptions
We rely on consent to send newsletter and marketing emails.
Subscribers must actively choose to join the mailing list. After subscribing, a confirmation email is sent and the subscription is not completed until the subscriber confirms their email address. Reading this Privacy Policy, submitting a contact form or leaving a comment does not amount to consent to receive the newsletter.
Where you have consented to receive the newsletter, we also measure email opens and link clicks to help us understand which content is most useful and to improve future newsletters.
A single subscriber group is used within MailerLite to manage newsletter subscriptions as required by the website's integration with MailerLite. This group is used solely for administrative purposes. Subscribers are not otherwise grouped or segmented based on their interests, signup source or activity, and no automated email sequences are used beyond the subscription confirmation and welcome email.
We may rely on legitimate interests to:
- Maintain evidence of the consent provided
- Administer subscription preferences
- Process unsubscribe requests
- Keep a minimal record of unsubscribed email addresses to ensure that people who have unsubscribed are not accidentally added back to the mailing list
- Protect the mailing system from abuse
Analytics and download measurement
We rely on consent to use Google Analytics and its associated cookies or identifiers. Analytics will not be activated unless the visitor has accepted the relevant cookie category. Where consent has been provided, analytics information may be used to:
- Measure website visits and interactions
- Understand how visitors reach the website
- Identify popular pages and resources
- Measure GPX and other file downloads
- Improve website content, structure and performance
- Identify technical and usability problems
Visitors can refuse or withdraw analytics consent without losing access to the main website or its GPX downloads.
Security and technical operation
We rely on legitimate interests to use technical information through Wordfence and Hostinger where necessary to:
- Secure the website
- Detect and prevent malicious activity
- Block attacks and unauthorised access
- Investigate security incidents
- Maintain server and security logs
- Diagnose faults and errors
- Maintain the website's availability and performance
- Create and restore backups where necessary to recover the website following technical failures or security incidents
These activities are necessary to operate, maintain and protect the website, its content and the information processed through it. The technical information used for these purposes is not used for advertising, profiling or unrelated marketing.
Cookie consent records
We rely on legitimate interests to maintain limited records of visitors' cookie preferences so that we can:
- Remember and apply those preferences
- Avoid repeatedly asking for the same preference
- Demonstrate that consent choices have been respected
- Investigate issues relating to the website's cookie consent controls
CookieYes maintains consent records, including the cookie categories accepted or rejected, the date and time of the visitor's choice, a unique consent identifier and limited technical information necessary to manage those preferences. Consent records are retained for one year. Where maintaining a particular record is necessary to meet a specific legal requirement, legal obligation may also apply.
Legal obligations
We may process personal information where it is necessary to comply with a legal obligation that applies to us. This may include:
- Responding to a court order or other legally binding request
- Cooperating with regulators or law-enforcement authorities where legally required
- Retaining or disclosing information where required by applicable law
- Complying with data-protection obligations and responding to valid requests from individuals
We will only rely on legal obligation where there is an identifiable requirement under UK law. It will not be used merely because processing is convenient or included in a contract.
Legal claims
Where necessary, we may use or retain personal information to establish, exercise or defend legal claims. Depending on the circumstances, this may be based on:
- Our legitimate interests in protecting our legal rights
- Compliance with a legal obligation
- Another applicable condition provided by data-protection law
Information will not be retained indefinitely simply because a legal dispute might theoretically occur.
Changes to our lawful bases
If we intend to use personal information for a materially different purpose, we will first consider whether that use is compatible with the original purpose and whether an appropriate lawful basis applies. Where necessary, we will:
- Update this Privacy Policy
- Provide additional information to affected visitors
- Obtain fresh consent before beginning the new processing
6. International Data Transfers
Explored by Will is based in the United Kingdom. However, some of the organisations that provide services to this website may process or store personal information outside the UK. Where this happens, we take reasonable steps to ensure that personal information continues to receive an appropriate level of protection.
Why international transfers may occur
International transfers may occur when we use trusted third-party providers to operate, secure or improve the website. These providers may process information outside the UK in order to provide services such as:
- Website analytics
- Newsletter delivery
- Website security
- Cookie consent management
- Website hosting infrastructure
- Technical support
Our service providers
Some of our service providers may process personal information outside the United Kingdom as part of delivering their services. These providers include:
- Hostinger
- Google Analytics
- MailerLite
- Wordfence
- CookieYes
The countries or regions involved depend on the provider, the services used and their infrastructure at the time the information is processed. Where personal information is transferred outside the United Kingdom, we rely on the provider to implement appropriate safeguards where required by applicable data protection law.
How we protect transferred information
Where personal information is transferred outside the United Kingdom, we seek to ensure that appropriate safeguards are in place. Depending on the provider and destination, these safeguards may include:
- Transfers to countries recognised by the UK Government as providing an adequate level of data protection
- The use of the UK International Data Transfer Agreement (IDTA)
- The UK International Data Transfer Addendum to the European Commission’s Standard Contractual Clauses
- Other safeguards recognised under UK data-protection law
The safeguards used will depend on the provider and the country receiving the information.
Google Analytics
Google Analytics may process analytics information using infrastructure located in different countries. Google states that it uses contractual and technical safeguards to protect transferred information where international processing takes place. We configure Google Analytics to support website analytics only and do not intentionally send names, email addresses or contact form contents to Google Analytics.
MailerLite
MailerLite may process subscriber information using infrastructure located in the European Union and, where necessary to provide its services, in other countries. Where MailerLite transfers personal information internationally, it states that appropriate contractual and organisational safeguards are applied.
Hostinger
Hostinger provides the hosting, email, backup and content delivery services used by Explored by Will.
The website is hosted in the United Kingdom. As part of providing its services, Hostinger may process or store information using infrastructure in other countries where necessary. Where personal information is transferred internationally, Hostinger states that appropriate safeguards are applied where required by applicable data protection law.
CookieYes and Wordfence
CookieYes and Wordfence may process limited technical information where necessary to provide cookie-management and website-security services. If either provider transfers personal information outside the United Kingdom, appropriate safeguards are applied where required by applicable data-protection law.
Your rights
International transfers do not reduce your rights under UK data-protection law. Where required by law, we will ensure that suitable safeguards are in place before transferring personal information internationally. You may contact us at data@exploredbywill.com if you would like further information about the safeguards that apply to any international transfer of your personal information.
Changes to our service providers
As Explored by Will develops, additional service providers may be introduced. Before introducing a provider that transfers personal information internationally, we will:
- Assess the provider's privacy and security arrangements
- Consider the safeguards available for any international transfers
- Update this Privacy Policy where necessary
- Obtain additional consent where required by law
7. How Long We Keep Your Information
We only keep personal information for as long as it is reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The length of time we retain information depends on the type of information, why it was collected and any legal, security or operational requirements that apply.
Contact form enquiries
Information submitted through the website's contact form is normally retained for up to 12 months after the enquiry has been resolved. This allows us to:
- Respond to any follow-up questions
- Maintain a record of correspondence where appropriate
- Resolve complaints or disputes
- Manage the website effectively
After this period, contact-form correspondence will normally be deleted unless there is a legitimate reason to retain it for longer.
Email correspondence
Emails sent directly to addresses such as data@exploredbywill.com are normally retained for up to 12 months after the matter has been resolved. Where necessary, emails may be retained for longer if they relate to:
- An ongoing enquiry
- A legal obligation
- A complaint or dispute
- A security incident
- Another legitimate administrative purpose
Website comments
Approved comments may remain published for as long as the related article remains available on the website. This helps preserve the context and continuity of discussions. If a comment is removed, the associated technical information will normally be deleted when it is no longer required for moderation, security or administrative purposes.
Newsletter subscriptions
Newsletter subscription information is retained while a visitor remains subscribed to the mailing list. When a subscriber unsubscribes, we may retain limited information to:
- Record that the subscription has ended
- Maintain evidence of the consent previously provided
- Prevent further marketing emails being sent accidentally
- Meet legal or regulatory requirements
We do not retain unnecessary marketing information after a subscriber has chosen to unsubscribe.
Google Analytics
Where analytics consent has been provided, information collected through Google Analytics is retained for 14 months in accordance with the settings configured for the website. Analytics information may be deleted or aggregated automatically after the configured retention period expires.
Cookie consent records
CookieYes records information about visitors' cookie preferences so that their choices can be remembered, applied and respected. Consent records are retained for one year in order to demonstrate and apply those choices. The cookie used to remember a visitor's preferences is retained in accordance with the website's Cookie Policy.
Security and technical records
Technical and security information generated by Wordfence and Hostinger is retained only for as long as reasonably necessary to:
- Protect the website
- Investigate security incidents
- Diagnose technical issues
- Maintain website performance
- Restore backups where required
Retention periods are configured within the relevant services and may differ depending on the type of record.
Website backups
Backup copies of the website are created to help restore the website following technical failures, security incidents or accidental data loss. Backups are retained only for operational and disaster-recovery purposes. Access to backup information is restricted to authorised administrators and service providers where necessary.
GPX downloads
Downloading a GPX file does not require visitors to create an account or provide their name or email address. Where analytics consent has been provided, limited analytics information relating to downloads may be retained in accordance with the Google Analytics retention settings. We do not maintain a separate database of GPX downloads linked to individual visitors.
When information is deleted
When personal information is no longer required, we will take reasonable steps to:
- Permanently delete it,
- Anonymise it where appropriate, or
- Remove identifying information so that it can no longer be linked to an individual.
Some information may remain in routine backup copies for a limited period until those backups are overwritten or expire naturally.
Exceptions
In some circumstances, we may retain information for longer than the periods described above where this is necessary to:
- Comply with a legal obligation
- Establish, exercise or defend legal claims
- Investigate fraud, misuse or security incidents
- Resolve disputes or complaints
- Protect the rights, property or safety of Explored by Will or others
We will only retain information for longer where there is a legitimate reason for doing so.
9. Your Data Protection Rights
Under UK data protection law, you have a number of rights in relation to your personal information. These rights do not apply in every circumstance, but where they do, we will respond to your request in accordance with applicable law. To exercise any of your rights, please contact us at data@exploredbywill.com. We may ask you to provide information to verify your identity before responding to your request. This helps us ensure that personal information is only disclosed to the correct person.
Your right of access
You have the right to ask whether we hold personal information about you and, where applicable, to request a copy of that information. This is commonly known as a Subject Access Request.
Your right to rectification
If you believe that the personal information we hold about you is inaccurate or incomplete, you have the right to ask us to correct or update it. We will make reasonable efforts to ensure that personal information is accurate and kept up to date.
Your right to erasure
In certain circumstances, you have the right to ask us to delete your personal information. This right is not absolute and may not apply where we are required to retain information for legal, security or other legitimate reasons.
Your right to restrict processing
You may have the right to ask us to temporarily restrict the way we use your personal information in certain circumstances. For example, this may apply while the accuracy of information is being verified or where there is a disagreement about how the information should be used.
Your right to data portability
Where applicable, you may request that personal information you have provided to us is supplied in a structured, commonly used and machine-readable format. This right generally applies where processing is based on your consent or on a contract and is carried out by automated means.
Your right to object
You have the right to object to certain types of processing. This includes:
- Processing based on our legitimate interests, where applicable.
- Direct marketing communications.
If you object to receiving our newsletter, you can unsubscribe at any time using the unsubscribe link included in every email or by contacting us directly.
Rights relating to automated decision-making
Explored by Will does not currently use automated decision-making or profiling that produces legal or similarly significant effects. If this changes in the future, we will update this Privacy Policy and provide any additional information required by law.
How to make a request
If you would like to exercise any of your data protection rights, please contact us using:
Email: data@exploredbywill.com
To help us respond efficiently, please include:
- Your name
- The email address you have used when contacting or subscribing to Explored by Will (if applicable)
- A brief description of your request
We may ask for additional information where necessary to verify your identity before responding.
How long we take to respond
We will normally respond to valid requests within one month, although this period may be extended where permitted by law, for example if a request is particularly complex or multiple requests have been made. If an extension is required, we will let you know as soon as reasonably possible and explain why additional time is needed.
Fees
In most cases, we will deal with your request free of charge. However, data protection law allows us to charge a reasonable fee or refuse a request where it is clearly unfounded, excessive or repetitive.
Complaints
If you are unhappy with how we have handled your personal information or responded to a request, we would appreciate the opportunity to address your concerns in the first instance. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority for data protection. Further information about making a complaint is available on the ICO website.
Changes to your rights
The rights available under UK data protection law may change over time. Where necessary, we will update this Privacy Policy to reflect any significant changes to the rights available to individuals.
10. How We Protect Your Information
We take the security of personal information seriously and use a combination of technical and organisational measures to help protect it against unauthorised access, loss, misuse, alteration or disclosure. While no website or online service can guarantee absolute security, we regularly review our systems and practices to help keep personal information secure.
Website security
Explored by Will is hosted by Hostinger and protected using a range of security measures, including:
- Secure HTTPS encryption
- Website security monitoring through Wordfence
- Firewall and malicious traffic protection
- IP and country blocking where appropriate
- Secure administrator access
- Regular website and plugin updates
- Routine website backups
These measures help protect the website against unauthorised access, malicious activity and common security threats.
Access to personal information
Access to personal information is restricted to those who need it in order to operate and maintain the website. Currently, access is limited to William Evans, who is responsible for the operation and administration of Explored by Will. If trusted service providers require access in order to deliver their services, they are expected to process information only as necessary to provide those services.
Passwords and account security
Administrator accounts are protected using strong passwords, two-factor authentication and appropriate security practices. Access credentials are not shared with unauthorised individuals.
Website updates and maintenance
The website, its themes and installed plugins are reviewed and updated regularly to help maintain security and compatibility. Security updates are applied as soon as reasonably practical following testing where appropriate. Routine maintenance also helps reduce the risk of known software vulnerabilities being exploited.
Backups
Regular backups are maintained to support recovery following:
- Hardware failure
- Software issues
- Security incidents
- Accidental deletion
- Other unexpected events
Backups are intended solely for operational and disaster-recovery purposes. Access to backup data is restricted where reasonably practicable.
Monitoring and incident detection
We use Wordfence and Hostinger to help identify:
- Suspicious activity
- Unauthorised access attempts
- Malicious requests
- Website errors
- Technical issues that may affect the security or availability of the website
Security information is reviewed where necessary to investigate incidents and protect the website.
Data minimisation
Where possible, we seek to collect only the personal information that is reasonably necessary for the purposes described in this Privacy Policy. We do not intentionally collect more personal information than is required to:
- Respond to enquiries
- Manage comments
- Operate the newsletter
- Secure the website
- Improve website performance
- Meet our legal obligations
Third-party service providers
We carefully select the third-party providers used to operate Explored by Will. Where personal information is processed by a service provider, we expect them to maintain appropriate security measures and to handle information in accordance with applicable data-protection law. Further information about these providers is available in the section Who We Share Information With.
Security incidents
If we become aware of a security incident affecting personal information, we will investigate the issue and take appropriate action. Where required by law, we will notify the appropriate authorities and affected individuals.
Your role in protecting your information
You can also help protect your information by:
- Choosing not to include unnecessary personal information in public comments
- Contacting us if you believe your information has been used incorrectly
- Exercising care when sharing personal information online
Continuous improvement
We regularly review our security arrangements as Explored by Will develops. Where appropriate, we will introduce additional safeguards, update our procedures and review the third-party services used to support the website.
11. Children's Privacy
Explored by Will is intended for a general audience and is not specifically directed at children. We do not knowingly collect personal information from children through this website. If we become aware that personal information has been provided by a child without appropriate consent, we will take reasonable steps to investigate the matter and, where appropriate, delete the information. If you are a parent or guardian and believe that your child has provided personal information through this website, please contact us at data@exploredbywill.com so that we can review the situation. As Explored by Will develops, we will review this section if new features or services are introduced that are specifically intended for children or young people.
12. External Websites
Explored by Will may contain links to third-party websites, products, services and other online resources that we believe may be useful or relevant to our visitors. These links are provided for your convenience and to help you discover additional information. However, once you leave Explored by Will, any information you provide is collected and processed in accordance with the privacy practices of the website you are visiting. We have no control over the content, availability or privacy practices of third-party websites and cannot accept responsibility for how they collect, use or protect your personal information. We encourage you to read the privacy policy of any external website before providing personal information or accepting the use of cookies.
From time to time, Explored by Will may link to websites including, but not limited to:
- Mapping and navigation services
- Outdoor organisations and charities
- Government and local authority websites
- Accommodation and visitor information
- Product manufacturers
- Retailers and affiliate partners
- Other websites, blogs and online publications
The inclusion of a link to another website does not imply that we endorse, approve or control that website unless we explicitly state otherwise. If we introduce embedded content in the future, such as videos, maps, social media posts or other third-party services, we will update this Privacy Policy where necessary to explain how those services may collect and process personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to Explored by Will, the services we provide, the way we process personal information, or changes in applicable laws and regulations. When we make changes, we will update the Last Updated date at the top of this page so that you can see when the Privacy Policy was most recently revised. Where a change materially affects how personal information is collected, used or shared, we will take appropriate steps to make visitors aware of the change before it takes effect, where required by law. We encourage you to review this Privacy Policy periodically to ensure that you remain informed about how your personal information is collected, used and protected. If new features or services are introduced that change the way personal information is processed, we will update this Privacy Policy before those changes become effective where reasonably practicable.
14. Contact Us
If you have any questions about this Privacy Policy, how Explored by Will uses your personal information, or if you would like to exercise any of your rights under UK data protection law, please get in touch.
Website Operator
William Evans
Website
https://exploredbywill.com
We will respond to privacy-related enquiries as soon as reasonably practicable and, where applicable, within the timescales required by UK data protection law. If you are not satisfied with our response, you have the right to raise your concerns with the Information Commissioner's Office (ICO), the UK's independent authority responsible for upholding information rights and data protection.