privacy & cookies
last updated 7 August 2026 · applies to goodliffe.co, jgoodliffe.com and related domains
This site is run by James Goodliffe (the "controller" in UK GDPR terms), a freelance lighting & video programmer based in the United Kingdom. The short version: this site collects as little as possible, uses essential cookies only, runs no analytics or advertising, and never sells or shares your data for marketing. Questions or requests: use the contact form.
cookies & on-device storage
Under the Privacy and Electronic Communications Regulations (PECR), consent is required for cookies that are not strictly necessary. This site only sets strictly necessary cookies, so no consent is needed — the small notice you may see on your first visit is informational, not a consent gate. In full:
| name | what it does | lifetime |
|---|---|---|
| PHPSESSID (cookie) | session security: sign-in state, protection against cross-site request forgery on forms, and one-off status messages. Set for all visitors because the security tokens protect the public contact and application forms too. | deleted when you close your browser |
| jgCookieOk (local storage) | remembers that you've dismissed the cookie notice, so it isn't shown on every visit. | until you clear your browser data |
| jgPlayer (session storage) | if you play a music mix, remembers the track and position so playback can continue as you move between pages — only ever created by your own tap on play. | this tab only; gone when the tab closes |
No analytics cookies, no advertising cookies, no cross-site tracking, no fingerprinting. Fonts are served from this website's own server, so ordinary page views make no requests to third parties at all.
third-party services
Two forms — the contact form and the betterSonosClient beta application — are protected by Google reCAPTCHA to keep automated abuse out. On those pages only, Google's script loads and may process your IP address and browser characteristics for the sole purpose of distinguishing people from bots (our legitimate interest in site security). See Google's privacy policy. reCAPTCHA does not load anywhere else on the site.
what you send us, and why
- Contact form: your name, email and message — used only to reply to you. Legal basis: legitimate interest in answering enquiries.
- Beta applications: name, email and the setup details you provide — used to run the beta programme, including emailing you a beta key and receiving in-app bug reports you choose to send. Legal basis: taking steps at your request (contract). You can ask for your tester data at any time — we can export or delete everything held on you.
- Equipment hire: identity, address and (for first-time hirers) credit check information as described in the hire policy — used to verify hirers and protect the equipment. Legal basis: contract and legitimate interest in fraud prevention. Shared only with credit reference agencies for those checks, or with police/insurers if a hire goes wrong.
- Music plays: play counts are simple anonymous totals — no listening profile is built and plays are not linked to you.
retention
Enquiry emails are kept as ordinary correspondence. Beta tester records are kept for the life of the beta programme or until you ask for deletion. Hire verification records are kept for the duration of the hire relationship plus a reasonable period for legal claims, then deleted.
your rights
Under UK GDPR you can ask for access to, correction of, or deletion of your personal data; ask us to restrict or object to processing; and take your data elsewhere. Use the contact form and we'll respond within one month. If you're unhappy with how a request is handled you can complain to the Information Commissioner's Office at ico.org.uk.
security
The site is served over HTTPS only; session cookies are marked Secure, HttpOnly and SameSite; passwords are stored hashed with modern algorithms; and admin access to any data described above is restricted to the site owner.