Last updated: 20/09/2026

Who I am

This website, Things Tom sees, is run by Tom Duddle ("I" or "me"). I'm responsible for the personal information collected through it, which makes me the "data controller" under UK data protection law. You can contact me at hello@thingstomsees.com.

Where the site is hosted

The site is built and hosted on Squarespace. Squarespace handles the information described below on my behalf so the site can work. It also uses some visitor data for its own purposes, as explained in its privacy policy at squarespace.com/privacy.

What information is collected, and why

When you visit. Each time you open a page, Squarespace receives your IP address, details of your browser, device and network, the page you came from and the pages you view here. This is needed to deliver the site to you, keep it secure and improve Squarespace's services.

Analytics. I use Squarespace's built-in analytics to see how the site is used. It records things like the pages visited, clicks, internal links followed, scrolling, searches and timestamps, alongside the browser, device, network and IP details above. I use this only to understand how many people visit and which content they look at.

Contact form. If you send a message through the Contact page, I collect the name, contact details and message you enter. I use these only to read and reply to you. The message goes through Squarespace, and it's sent to my email inbox.

Fonts. The site's fonts are loaded from Google Fonts and Adobe Fonts. To do this, those services may receive your IP address, browser and device details and the page you're viewing.

Cookies. Cookies are small files that a website stores on your device. This site always uses the cookies Squarespace needs to serve it securely. Analytics and performance cookies are set only after you accept them in the cookie banner. You can see the cookies Squarespace uses at support.squarespace.com/hc/articles/360001264507.

Links to other sites. Pages here link to other sites, such as Instagram. Once you click through, that site's own privacy policy applies, not this one.

My legal basis for using your information

Under UK data protection law, I rely on my legitimate interests in running, securing and improving the site, and in replying to messages you send me. For non-essential cookies, I rely on your consent.

Who I share it with

Only Squarespace and the services named above (Google Fonts and Adobe Fonts), and only as needed to run the site. I don't sell your information. Squarespace and some of its providers are based outside the UK, so your information may be processed in other countries. Squarespace's privacy policy explains how it handles this.

How long I keep it

I keep messages only as long as I need them to reply and follow up, and normally delete them within 12 months. Squarespace keeps hosting and analytics data according to its own policy.

Your rights

You can ask me to show you the information I hold about you, correct it, delete it, restrict how I use it, give you a copy of it, or stop using it for certain purposes. If I'm relying on your consent, you can withdraw it at any time. Email me at [your email address] to do any of this. If you're unhappy with how I've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If I change how the site handles information, I'll update this page and the date at the top.