Privacy

The short version

This is a personal site. It does not sell anything, it does not have accounts, and it does not build a profile of you. Two things collect data: the contact form, and analytics, which only runs if you accept the cookie banner.

If you use the contact form

I collect the name, email address and message you submit, so that I can read it and reply. That is the only reason it is collected and it is not used for anything else. The lawful basis is legitimate interest: you contacted me, so replying is expected.

Messages are stored in this site’s own database and emailed to me. I keep them while a conversation is useful and delete them when it is not. Ask me to delete yours and I will.

Cookies and analytics

No analytics or advertising cookies are set unless you accept them. The banner defaults to denied, and declining is a single click that is no harder to find than accepting.

If you accept, Google Analytics runs through Google Tag Manager and records anonymous usage: which pages are visited, roughly where in the world visitors are, and which sites they arrived from. I use it to know whether the site is worth keeping. Your choice is remembered in your browser so you are not asked again, and you can change it by clearing this site’s data.

Who else is involved

The site runs on a server I control, with the database on that same infrastructure. Uploaded images are stored with Cloudflare R2. Contact form notifications are sent through Resend. Analytics, if you accept it, goes to Google. Each of these only sees what it needs to do its job.

Your rights

Under UK GDPR you can ask what data I hold about you, ask for a copy, ask me to correct it, or ask me to delete it. Email me and I will do it. If you are unhappy with how I have handled it, you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes

If this notice changes in a way that matters, the date at the top changes with it.