Last updated: 15 October 2026
About This Website
World Through Frames (www.worldthroughframes.com) is a personal, non-commercial photography and travel website created and maintained by Ian Grant.
The website shares original photography, travel experiences, wildlife observations and information about places visited.
I respect the privacy of visitors and aim to collect only the information reasonably necessary to operate, maintain and improve the website.
This policy explains what information may be collected, how it is used and the choices available to visitors.
Information Collected
When you visit World Through Frames, some technical information may be processed automatically by the website and its hosting services. This can include your IP address, browser type, device information, pages requested and the date and time of your visit.
This information is used to operate the website, investigate technical problems and protect against malicious activity.
Website Analytics
World Through Frames currently uses Google Analytics 4 to understand how visitors use the website.
Google Analytics may collect information including:
- Pages visited and time spent on the website.
- General geographical location, such as country or region.
- Browser and device information.
- How visitors reached the website, including search engines and referring websites.
- Interactions with website content.
Google Analytics may use first-party cookies and similar technologies to distinguish visits and measure website activity.
I use analytics to understand which photographs, travel stories and other content visitors find interesting, and to help improve the website.
Google provides the analytics service and may process information on its own systems. Further details are available in Google's Privacy Policy.
Contact Forms
If you contact me using a form on the website, I may collect your name, email address and any information you choose to include in your message.
This information is used only to respond to your enquiry and manage any necessary correspondence.
I do not use contact information to send unsolicited marketing emails.
Why Information Is Processed
Personal information may be processed to respond to enquiries, maintain the website, protect its security and understand how visitors use its content.
Where appropriate, the lawful basis for processing personal data is legitimate interests, subject to the relevant assessment. Other lawful bases may apply depending on the processing activity.
Analytics involving cookies or similar technologies is also subject to the UK's Privacy and Electronic Communications Regulations. Certain statistical analytics can operate without prior consent where the legal conditions are satisfied, including providing clear information and a simple, free means of objecting. Otherwise, consent is required.
Cookies and Analytics Preferences
The website may use essential cookies where necessary for its operation and analytics cookies associated with Google Analytics.
Google Analytics commonly uses cookies beginning with _ga to distinguish visitors and sessions.
You can control or delete cookies through your browser settings. Please be aware that disabling certain cookies may affect the functionality of some websites.
Data Retention and Security
Information is kept only for as long as reasonably necessary for the purposes for which it was collected.
Google Analytics retains certain user-level and event-level information according to its configured data-retention settings. Aggregated statistical reports may remain available for longer.
Contact messages are retained for as long as reasonably necessary to respond and manage correspondence. Technical logs are retained according to the website's hosting and security requirements.
Reasonable measures are taken to protect information against unauthorised access, loss or misuse.
Sharing Information
I do not sell visitors' personal information.
Information may be processed by service providers necessary for operating the website, including hosting providers and Google Analytics.
Some providers may process information outside the United Kingdom. Where personal data is transferred internationally, applicable data protection requirements and safeguards must be observed.
Future Website Analytics
I may introduce a simple first-party analytics system to measure page views, content popularity and visitor engagement directly within World Through Frames.
The intention would be to collect minimal information, produce aggregated statistics and avoid unnecessary identification or profiling of individual visitors.
This privacy policy will be updated before any additional analytics processing is introduced.
Your Privacy Rights
Under UK data protection law, you may have rights to access, correct or request deletion of your personal information, restrict certain processing or object to its use.
If you have any questions, privacy requests or concerns about the information collected through this website, please contact me using the World Through Frames contact page.
You also have the right to complain to the Information Commissioner's Office (ICO) if you believe your personal information has been handled incorrectly.
Changes to This Policy
This policy may be updated as the website develops or the technologies used change.
Any significant changes will be reflected on this page, together with the date of the latest update.
Analytics and your choices
Analytics is optional. Open Analytics Preferences from the footer to accept, reject, customise or withdraw permission, or object to statistical analytics, free of charge at any time.
Basic page views
We count public page views, coarse browser/device and bot categories and referring hostname totals. We discard URL queries and fragments. Navigation retry keys expire after 48 hours and are not visitor IDs. This feature can operate with a free objection control only when its assessed statistical scope, deployment verification and operational safeguards are confirmed; otherwise it requires prior consent or remains blocked.
Data protection basis for consent-free statistics: Legitimate interests. The operator maintains a separate purpose, necessity, balancing and jurisdiction assessment; the UK device-access exception does not itself provide a UK GDPR lawful basis. Hosting processors act for the site operator. No advertising, profiling, unrelated secondary use or cross-site tracking is authorised by this statistical scope.
Production aggregates are retained for up to 365 days; diagnostic data outside production for up to 7 days. Pending events are retained until safely aggregated. Cleanup continues when collection is disabled. Historical totals are not automatically erased by disabling collection.
Positive permissions expire after up to 90 days and require review. This browser remembers your choices solely for privacy controls until you change, reset or clear them; objections remain effective after positive permissions expire. Expired receipt and grant details are removed when controls next resolve. This is separate from analytics storage and contains no analytics visitor ID. Previous unversioned enabled choices do not count as current consent. Google property retention is controlled separately by the operator.