Privacy Policy

Transparent information about how we collect, use, and protect your data.

Last updated: 7 November 2025

Joshua Clarke Security (“we”, “us”, “our”) operates joshbc.com and related services. Joshua Clarke is the data controller and can be contacted via JCSecYT@outlook.com for all privacy enquiries.

We are committed to protecting your privacy and being transparent about how we collect, use, store, and share personal information when you visit our website or interact with our content.

How to Contact the Data Controller

Joshua Clarke Security is responsible for deciding how personal information is processed. For questions, to exercise your rights, or to raise a concern, email JCSecYT@outlook.com. We aim to respond within one calendar month in line with UK GDPR requirements.

Information We Collect

  • Personal information you provide directly (name, email, messages through contact forms)
  • Automatically collected information (IP address, browser type, device information, referring website)
  • Cookies and similar tracking technologies for website functionality, analytics, and spam prevention
  • YouTube viewing data when you interact with embedded videos
  • Usage data and website interaction patterns
  • Search queries and on-site search interactions (powered by Algolia)

We collect the minimum personal information necessary to deliver requested services, support security operations, and understand how visitors engage with our content.

Legal Bases for Processing

  • Consent for analytics, advertising cookies, and newsletter subscriptions. You can withdraw consent at any time via our cookie settings tool or by unsubscribing from emails.
  • Legitimate interests to maintain site security, prevent abuse, and understand aggregate audience engagement. We balance these interests against your rights and expectations.
  • Performance of a contract when we respond to contact requests or deliver requested resources, such as newsletters or downloads.
  • Compliance with legal obligations, including record keeping, tax requirements, and responding to lawful requests from public authorities.

Microsoft Clarity Analytics

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioural metrics, heatmaps, and session replay to improve and promote our content. Website usage data is captured using first and third-party cookies and other tracking technologies to understand the popularity of pages and on-site activity. Additionally, we use this information for site optimisation, fraud/security purposes, and advertising. For more detail on how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

Microsoft Clarity helps us understand how visitors interact with our website through session replays and heatmaps. This allows us to make better data-driven improvements to our user experience.

Algolia Hosted Search

We use Algolia to provide fast, relevant search results within the site. When you use the search feature, Algolia processes the query terms you type, the approximate location inferred from your IP address, device and browser metadata, and interaction events (such as clicks on results). This data helps deliver search results, safeguard the service from abuse, and provide aggregated performance analytics.

Algolia acts as our data processor and stores search data on servers located in the European Union and United States. We rely on Algolia's standard contractual clauses and security commitments to safeguard international transfers. You can learn more by reviewing the Algolia Privacy Policy. Search queries are retained in line with Algolia's default retention windows (currently up to 90 days) before being anonymised or deleted.

How Long We Keep Information

We keep personal information only for as long as necessary to fulfil the purposes outlined in this policy and to meet our legal obligations:

  • Contact enquiries are retained for up to 12 months after the conversation is closed, unless ongoing support requires a longer period.
  • Newsletter subscription details are retained until you unsubscribe or we close the service, after which they are suppressed to honour opt-out requests.
  • Analytics and advertising identifiers are stored in line with vendor default retention periods (currently up to 26 months for Google Analytics) and anonymised wherever possible.
  • Server and security logs are retained for up to 12 months to monitor abuse, detect incidents, and meet legal obligations.

When data is no longer required, we securely delete or anonymise it. We may retain anonymised statistics that do not identify you to monitor long-term trends.

Google AdSense and Advertising

  • We use Google AdSense to display advertisements on our website
  • Google may use cookies and web beacons to serve ads based on your visits to this and other websites
  • These cookies enable Google and its partners to serve ads based on your visit history
  • You can opt out of personalised advertising by visiting Google's Ads Settings
  • Third-party vendors may also place and read cookies on your browser for ad targeting
  • We do not have access to or control over these third-party cookies

Cookies and Tracking Technologies

  • Essential cookies for website functionality and security
  • Analytics cookies to understand website usage (Google Analytics)
  • Analytics cookies for user behaviour insights (Microsoft Clarity)
  • Advertising cookies for personalised ad experiences (Google AdSense)
  • Social media cookies from embedded YouTube videos
  • You can control cookie preferences through your browser settings
  • Disabling cookies may affect website functionality

You can review or change your consent choices at any time by selecting the “Cookie Settings” link in our site footer. This launches our CookieYes preference centre where you can enable or disable non-essential cookies. You can also review the Cookie Policy for a full breakdown of cookie categories and partners.

Google reCAPTCHA

We use Google reCAPTCHA on our contact forms to protect the website against spam and abuse. The reCAPTCHA widget analyses interactions (such as IP address, device and browser information, and cursor movements) to determine whether an action is performed by a human or automated script. This processing occurs in accordance with the Google Privacy Policy and Google Terms of Service.

By submitting a protected form you acknowledge this verification is necessary to maintain the security of our services. Google acts as an independent controller for the data it collects through reCAPTCHA; you can learn more about how Google uses this data by visiting the links above.

How We Use Your Information

  • Respond to your inquiries and provide customer support
  • Improve website content and user experience
  • Analyse website traffic and usage patterns
  • Comply with legal obligations and protect our rights
  • Send periodic emails if you subscribe to our newsletter
  • Personalise your experience and deliver relevant content

Information Sharing and Disclosure

  • We do not sell, trade, or rent your personal information to third parties
  • Information may be shared with trusted service providers (Google Analytics, Algolia, Microsoft Clarity, AdSense)
  • We may disclose information when required by law or to protect our rights
  • Anonymous, aggregated data may be shared for research or business purposes
  • In case of business transfer, user information may be transferred to new owners

Our service providers act as data processors and may only process personal information on our documented instructions. They must implement appropriate technical and organisational measures to protect your data and are prohibited from retaining it longer than necessary.

International Transfers & Safeguards

Some of our providers (including Google LLC and Microsoft Corporation) are based outside the United Kingdom and European Economic Area. When personal information is transferred internationally, we rely on UK adequacy regulations or the latest UK-approved Standard Contractual Clauses alongside vendor security commitments.

If you would like more detail about cross-border safeguards, contact us at JCSecYT@outlook.com.

Data Security

We implement appropriate security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

Your Rights

Under UK GDPR you have several rights in relation to your personal information. You can exercise these by emailing JCSecYT@outlook.com.

  • Access – request a copy of the personal information we hold about you.
  • Rectification – ask us to correct inaccurate or incomplete data.
  • Erasure – request deletion where there is no lawful reason for us to keep the data.
  • Restriction – ask us to suspend processing while we verify accuracy or resolve a dispute.
  • Objection – object to processing based on legitimate interests or direct marketing.
  • Portability – receive the personal data you provided in a structured, commonly used format.
  • Withdraw consent – change your mind where processing relies on consent (for example, newsletter emails or analytics cookies).
  • Complain – raise concerns with the UK Information Commissioner's Office (ICO) if you are unhappy with how we handle your data.

We may request additional information to verify your identity before fulfilling a rights request. Our goal is to respond within one month; complex requests may take up to two months in line with regulatory guidance.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

Policy Updates

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date, and significant updates may be highlighted via a banner or email notification to newsletter subscribers. Continued use of our website after changes constitutes acceptance of the revised policy.