What happens to what you send.

If you submit the enquiry form, I receive the name, email address, company name, service interest and message you provide. That is the entire dataset.

This site sets no cookies, runs no analytics and loads no third-party scripts or fonts. The only third parties involved are the hosting provider and, where configured, the transactional email provider that delivers the form.

Enquiry data is used to reply to you and, if we work together, to prepare a scope, quote or contract. Nothing is added to a mailing list and nothing is sold or shared for marketing.

The lawful basis is taking steps at your request before entering a contract, or legitimate interest in responding to a business enquiry.

Enquiries that do not lead to work are deleted within 12 months. Engagement records, reports and correspondence are kept for as long as required by the contract and by applicable professional or legal obligations.

Hosting: Vercel Inc., which processes standard request logs (IP address, user agent, timestamp) for delivery and abuse prevention.

Email: the transactional email provider configured for the contact form, used only to deliver the message to my inbox.

No other processors are involved. Where a client engagement requires a specific processor, that is agreed in the engagement contract.

You can ask what is held about you, request a copy, ask for corrections, or ask for deletion. Write to the email address below and it will be handled within 30 days.

If you believe your data has been handled improperly, you can raise it with the relevant supervisory authority in your country of residence.

The site is served over HTTPS with a strict content security policy. Enquiry form submissions are validated server-side, rate limited, and protected against automated submission. Access to enquiry data is limited to me.

No system is perfect. If you find a weakness in this site, please report it. The disclosure policy is on the research page.