Privacy and Cookie Consent Policy
Effective date: 3 November 2026
Version date: 3 November 2026
1. Who I am
1.1 This website, www.euanhallifax.com (the "site"), is run by and for Euan Hallifax ("I", "me", "my"), as an individual. I am the controller of the personal data described in this policy.
1.2 You can contact me:
• by post: Euan Hallifax, 20-22 Wenlock Road, London, N1 7GU, United Kingdom (mail forwarding address); or
• online: through the contact form on the site's Contact page (www.euanhallifax.com/contact).
2. What this policy covers
2.1 This policy explains what personal data is collected through the site, why, what happens to it, and your rights. It also explains the cookies the site uses (section 9).
2.2 The site is a personal information site about me, my role at NSN Global Services and my participation in International Trade Centre programmes and events. Nothing is sold through it. The only place where you give me personal data is the contact form.
2.3 The site links to other websites, including those of NSN GLOBAL SERVICES LLC (www.nsnglobalservices.com), the International Trade Centre (www.intracen.org) and UN Trade and Development (UNCTAD) (unctad.org). These organisations are separate from me and from this site, and each is responsible for its own website and its own handling of personal data. This policy covers only personal data collected through www.euanhallifax.com. Please read the privacy notice of any other website you visit.
2.4 General notices about the site are on the Legal Notices page (www.euanhallifax.com/legal). That page does not form part of this policy, and if anything on it conflicts with this policy, this policy takes priority.
3. The personal data this site collects
3.1 Information you provide through the contact form: your name, email address, phone number (optional), country, and the content of your message.
3.2 Information collected automatically when you visit the site:
• technical information processed by the website host, Squarespace, to deliver and secure the site, such as your IP address, browser and device type, and the pages you request;
• information processed by Google reCAPTCHA when you use the contact form, to check that you are a person and not a spam bot (see section 9); and
• only if you accept analytics cookies: information about how you use the site, such as pages visited, how you arrived and visit duration, collected by Squarespace Analytics.
3.3 The site does not ask for, and please do not send, special category data (such as health information, racial or ethnic origin, religious beliefs or political opinions) or information about criminal offences.
4. How I use your data and my lawful basis
Purpose | Data used | Lawful basis (UK GDPR Article 6)
Reading and replying to your enquiry and keeping a record of our correspondence | Contact form details and message | Legitimate interests: responding to people who contact me
Keeping the site and the contact form secure and free of spam and abuse | Technical data, reCAPTCHA data | Legitimate interests: protecting the site and its visitors
Understanding how the site is used so I can improve it | Analytics data | Consent: only if you accept analytics cookies
Passing your enquiry to NSN GLOBAL SERVICES LLC, only if you ask me to or agree when I check with you (section 5.2) | Contact form details and message | Consent
Complying with the law, and establishing, exercising or defending legal claims | Any of the above, as necessary | Legal obligation or legitimate interests
4.1 Where I rely on legitimate interests, I have weighed my interests against your rights and freedoms. You have the right to object (section 8).
4.2 You do not have to give me any personal data. There is no legal or contractual requirement to do so. However, I need your name and a way of contacting you to reply to an enquiry.
4.3 I do not send marketing communications, and I do not sell or share your personal data for advertising.
4.4 I do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects.
5. Who your data may be shared with
5.1 I share personal data only with:
• Squarespace, Inc. (USA), which hosts the site and its forms, delivers form submissions and provides site analytics. It acts on my behalf under its Data Processing Addendum.
• Google LLC (USA), which provides the reCAPTCHA anti-spam service used on the contact form. Use of reCAPTCHA is subject to Google's Privacy Policy (policies.google.com/privacy) and Terms of Service (policies.google.com/terms).
• My email service provider, which stores the emails in which contact form submissions are delivered to me and the replies I send. It acts on my behalf.
• Professional advisers, courts, regulators or law enforcement, where this is required by law or needed to establish, exercise or defend legal claims.
5.2 If your enquiry is really for NSN Global Services or NSN UK, I will ask you before passing it on, unless you have already asked me to. If you agree, I will send it to NSN GLOBAL SERVICES LLC, which is based in the United States and handles all enquiries about NSN, including those about NSN UK. It will then handle your data as an independent controller under its own privacy policy (www.nsnglobalservices.com/privacy-policy). You can instead contact NSN directly through its website.
5.3 I do not pass enquiries to the International Trade Centre, UNCTAD or any other organisation mentioned on the site.
6. International transfers
6.1 Squarespace and Google process data in the United States. Squarespace, Inc. and Google LLC are both certified under the UK Extension to the EU-US Data Privacy Framework. Transfers to them are made under the UK's adequacy regulations for that framework (the "UK-US data bridge"). Where the framework does not apply, transfers rely on the International Data Transfer Addendum to the EU Standard Contractual Clauses issued under UK data protection law.
6.2 If you agree to me passing your enquiry to NSN GLOBAL SERVICES LLC in the United States (section 5.2), that transfer is made with your explicit consent. The United States may not give your data the same level of protection as the UK, but NSN GLOBAL SERVICES LLC will handle it under its own privacy policy.
7. How long your data is kept
Data | How long
Contact form enquiries and correspondence | 12 months after our last correspondence, then deleted. If the enquiry relates to a potential legal claim, I keep it for as long as needed for that purpose, normally no more than 6 years.
Squarespace Analytics data (only with your consent) | For as long as Squarespace retains analytics data for my site account. It is used only in aggregated reports.
Cookies | See the cookie tables in section 9.
8. Your rights
8.1 Under UK data protection law you have the right to:
• access a copy of your personal data;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict how your data is used in certain circumstances;
• object to my use of your data where I rely on legitimate interests;
• data portability where I rely on consent and the processing is automated; and
• withdraw consent at any time, for example by changing your cookie settings. This does not affect processing that took place before you withdrew consent.
8.2 To exercise any of these rights, write to me at the postal address in section 1 or use the contact form (please say "Data protection request" in your message). I may need to confirm your identity first. I will respond within one month. That period can be extended by up to two further months for complex requests, in which case I will tell you why. There is normally no fee.
8.3 If you live outside the UK, including in the United States, you can make the same requests in the same way, and I will also honour any additional rights given to you by the law where you live, to the extent that law applies to me.
9. Cookies and similar technologies
9.1 What they are. Cookies are small files stored on your device. "Similar technologies" include browser local storage. In this section, "cookies" covers both.
9.2 Your choices.
• When you first visit, a cookie banner lets you Accept all, Decline non-essential or Manage cookies.
• Analytics cookies are not set unless you accept them.
• You can change your choice at any time by clicking Cookie Preferences at the bottom of any page.
• You can also delete or block cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the site, such as the contact form, from working.
9.3 Strictly necessary cookies (always on). These are needed to deliver the site securely, protect the contact form against spam and fraud, and remember your cookie choices. The law does not require consent for them.
Name | Provided by | Purpose | Duration
crumb | Squarespace | Security: prevents cross-site request forgery (CSRF) | Session
ss_performancecookiesAllowed | Squarespace | Remembers whether you accepted performance and analytics cookies | 30 days
ss_marketingcookiesAllowed | Squarespace | Remembers your choice about marketing cookies (the site does not use marketing cookies) | 30 days
_ssid | Squarespace | Recognises devices for anti-fraud purposes | 4 years
RecentRedirect | Squarespace | Prevents redirect loops (only if a page redirect is triggered) | 30 minutes
Test | Squarespace | Checks whether your browser supports cookies | Session
dds, ddcookie_test, ddsite_test | Squarespace (error monitoring) | Detect and report technical errors in the site; test whether cookies are supported | dds: 4 hours; test cookies: expire immediately
_GRECAPTCHA | Google (reCAPTCHA) | Risk analysis to tell people apart from spam bots on the contact form | Set by Google
Squarespace may set some of these only in certain circumstances.
9.4 Analytics and performance cookies (optional, only with your consent). These help me understand how many people visit the site and which pages they view, through Squarespace Analytics.
Name | Provided by | Purpose | Duration
ss_cid | Squarespace | Identifies unique visitors and tracks visits | 2 years
ss_cpvisit | Squarespace | Identifies unique visitors and tracks visits | 2 years
ss_cvr | Squarespace | Identifies unique visitors and tracks visits | 2 years
ss_cvisit | Squarespace | Identifies unique visitors and tracks visits | 30 minutes
ss_cvt | Squarespace | Identifies unique visitors and tracks visits | 30 minutes
9.5 Marketing and advertising cookies. None are used.
9.6 Cookie names and durations are taken from Squarespace's published cookie list and Google's reCAPTCHA documentation, and may change when those providers update their services. I will update this table when I become aware of changes.
10. Security
10.1 The site is served over an encrypted (HTTPS) connection, and form submissions are protected by Squarespace's security measures. I limit access to enquiries to myself and, where necessary, the people described in section 5. No online system is completely secure, so please do not send highly sensitive information through the contact form.
11. Children
11.1 The site is not aimed at, or for, children. If you are under 18, please do not use the contact form. If you are under 18 and need to contact me, please ask a parent or guardian to do so for you.
12. Complaints
12.1 Complaining to me. If you are unhappy with how I have handled your personal data, please complain to me first, either by post at the address in section 1 or through the contact form (please say "Data protection complaint" in your message). I will acknowledge your complaint within 30 days, look into it without undue delay, keep you informed of progress, and tell you the outcome.
12.2 Complaining to the regulator. You also have the right to complain to the UK data protection regulator, the Information Commission, which operates as the Information Commission's Office (ICO):
• website: ico.org.uk/make-a-complaint
• telephone: 0303 123 1113
• post: Information Commission's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
13. Changes to this policy
13.1 I may update this policy, for example if the site's features, the services I use or the law change. The effective date at the top shows when it was last changed. If I make a significant change that affects how I use personal data you have already given me, I will tell you where I reasonably can.
14. Superseding policy
14.1 This Privacy and Cookie Policy, effective 3 November 2026, supersedes and replaces all previous versions of the privacy policy, cookie policy and Privacy and Cookie Consent Policy of www.euanhallifax.com, including the versions dated 6 March 2026 and 2 November 2026. Those earlier versions no longer apply.