← Back to the portfolio

PP Privacy & Cookies Policy

Last updated: 2 November 2026

This policy explains what information the rosslavery.com website collects, why it is collected, how long it is kept, and the rights you have under UK data protection law. It applies only to this website; it does not cover Flat50 Management, production companies, or any other organisation you may contact.

1. Who is responsible for your information

The data controller for this website is Ross Lavery, operating as a sole trader (a Scottish actor based in Edinburgh and London). Ross does not use this website to collect contact details from you directly. For privacy questions, or to exercise your rights, please email Ross directly at ross@rosslavery.com.

2. What this website does not do

  • There is no contact form, no newsletter and no account system.
  • Casting enquiries are handled by Flat50 Management, not through this website.
  • There is no advertising, no tracking pixels and no marketing of any kind.
  • Information is not sold, shared with advertisers, or used to build marketing profiles.
  • No decisions are made about you by automated means.

3. Information collected when you visit

Server access logs

Like most websites, the server that hosts this site records basic access log information for each request: your IP address, the date and time of the request, the page or file requested, your browser or device type (user agent), and the address of the page you came from (referrer). These logs are used to keep the website secure, to understand basic performance, and to investigate problems such as outages or abuse. This is done on the basis of legitimate interests (the safe operation of the website). Access logs are removed automatically by scheduled log rotation, normally within about six weeks.

Optional analytics (only if you accept)

If - and only if - you explicitly accept when prompted, the website uses Google Analytics to understand how the site is used (for example, which pages are visited and how visitors arrive). The lawful basis for this processing is your consent. The analytics cookies used are _ga and _ga_X38Y44BPT8, both configured to expire after six months. Advertising signals and advertising personalisation are disabled, and the site does not show any advertising.

Google Analytics is provided by Google LLC. Google may process this information, including outside the United Kingdom (for example in the United States), and applies its own settings, terms and retention to that processing. Google's role, and how it handles data collected through partner sites, is described in Google's privacy policy and how Google uses information from partner sites.

4. Your consent choice

When you first visit, a panel asks you to accept or reject analytics. That choice is stored only in your own browser's local storage, expires after six months, and is never sent to Ross or any other server. You can change or withdraw your choice at any time using the Cookie settings button in the footer of the site. Withdrawing consent stops analytics from that point on and removes the accessible analytics cookies, although it cannot delete information already sent to Google.

5. How long information is kept

  • Server access logs: removed by automatic log rotation, normally within about six weeks.
  • Analytics cookies: expire after six months and are not updated on repeat visits.
  • Your consent choice: kept in your browser for six months, then re-asked.
  • Information accepted into Google Analytics: retained under Google's settings and policies described in the links above.

6. Your rights

Under UK data protection law (the UK GDPR and the Data Protection Act 2018), you have the right to:

  • access a copy of personal information held about you;
  • ask for incorrect information to be corrected;
  • ask for information to be erased, or its processing restricted;
  • object to processing based on legitimate interests (such as the access logs);
  • receive information in a structured, commonly used format where it was provided and processed by consent or contract; and
  • withdraw consent to analytics at any time, using the Cookie settings button.

To make a request, email Ross directly at ross@rosslavery.com. You also have the right to complain to the UK information regulator, the Information Commissioner's Office (ICO).

7. Security

The site is served over HTTPS and reasonable technical and organisational measures are used to protect information collected through it. No method of transmission or storage is completely secure, and Ross cannot guarantee absolute security.

8. Children

This website is a professional portfolio and is not directed at children under 16. Ross does not knowingly collect personal information from children.

9. Changes to this policy

If this website changes what it collects or how it processes information, this policy will be updated and the date at the top will change. Please check it from time to time.