Plain-English summary first: this site sets no cookies of its own, runs no advertising, and uses a privacy-respecting analytics tool that doesn’t identify you or track you between visits. Detail below.
Who is the data controller
For this website, the data controller is Neil Garratt, Member of the London Assembly for Croydon & Sutton. You can contact me at London@NeilGarratt.com about anything on this page.
This privacy notice covers neilgarratt.com and the GitHub Pages address it sits on. It does not cover separate services I link to — including Substack, my newsletter platform, which has its own privacy policy.
What this site collects about your visit
I use GoatCounter, an open-source analytics tool that records aggregate page views without using cookies and without identifying individuals.
What’s stored when you load a page:
- The URL you visited (e.g.
/about/) - The page that referred you, if any (e.g. a tweet or a search-engine results page)
- Your country, derived from your IP address — the IP itself is not stored
- Your browser and operating system, in broad terms (e.g. “Chrome on Windows”)
- The time of the visit
What’s not stored: your IP address, any cookie or identifier, anything that could be tied back to you across visits, your name, your email, or anything you typed. GoatCounter’s own privacy policy goes into the technical detail.
I look at this data to understand which pages get read and which campaigns resonate. That’s it.
Cookies
This site sets no cookies. None for analytics, none for advertising, none for “preferences.” The one exception is my newsletter at newsletter.neilgarratt.com, which Substack runs and where Substack sets its own cookies: your browser may list those under neilgarratt.com. Any other cookie from neilgarratt.com means something has gone wrong, please let me know.
Third-party content embedded on the site
A few features pull content from elsewhere. Each one carries its own implications:
- YouTube videos. Where I embed a video, I use YouTube’s
youtube-nocookieprivacy mode. YouTube only learns about your visit if you press play. If you do, YouTube’s own privacy policy applies. - Newsletter feed. The homepage and Recent Activity list my recent newsletter posts. I copy them from Substack’s public feed into this site when I publish, so viewing them doesn’t contact Substack.
- Newsletter signup. The signup form comes from Substack and only loads when you click Subscribe free, nothing is sent to Substack before then. From that point, including sign-up, Substack’s own privacy policy applies and Substack may set cookies. After you subscribe, Substack opens a welcome page in a new tab.
If you email me at the address above, I’ll have your message and your email address until I no longer need them to deal with whatever you wrote about. I don’t add correspondents to a mailing list, so the only way onto my newsletter is to sign up via Substack yourself.
Your rights
Under UK GDPR you have the right to ask what data I hold about you, to ask me to correct or delete it, and to complain to the Information Commissioner’s Office if you think I’ve handled your data badly. Email me first and I’ll respond within a month.
Changes to this notice
If I change anything material on this page, I’ll update the date below.
Last updated: October 2026.