Privacy & Cookie Policy

1. Who controls your data

2. Contact enquiries

When you use the contact form, the site processes your name, email address and message to answer your enquiry and, where requested, take steps before entering into a contract. The legal bases are Article 6(1)(b) GDPR and the controller's legitimate interest in handling professional correspondence and protecting possible claims under Article 6(1)(f) GDPR.

Providing these details is voluntary, but without them the enquiry cannot be answered. Messages are sent to Gmail and are not stored in the website database. Enquiries that do not lead to cooperation are deleted within 12 months of the last correspondence. If cooperation begins, relevant correspondence may be retained for the period required by contractual, accounting and legal obligations.

3. Security and abuse prevention

The site uses a short-lived security token and a pseudonymous hash derived from connection information to prevent spam and repeated submissions. The hash is stored for one hour and does not contain the message. Processing is based on the controller's legitimate interest in securing the website under Article 6(1)(f) GDPR.

4. Analytics

Google Analytics 4 is used only after you select “Accept analytics”. Its purpose is to understand aggregated page visits, portfolio views and successful form submissions. Names, email addresses and message contents are never sent to Analytics. The legal basis is your consent under Article 6(1)(a) GDPR, which you can withdraw at any time through “Cookie settings” in the footer.

Analytics is currently enabled subject to consent. Google Signals, advertising features and ad personalisation are disabled. Analytics event retention is set to two months and first-party Analytics cookies are limited to six months.

5. Service providers and international transfers

Data may be processed by OVHcloud for European hosting and backups, and by Google Ireland Limited for Gmail delivery and, after consent, Google Analytics. These providers process data under their applicable contractual and data-protection terms. Where a provider processes information outside the European Economic Area, transfers rely on an applicable adequacy decision or contractual safeguards such as the European Commission's Standard Contractual Clauses.

6. Your rights

Depending on the legal basis and circumstances, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw Analytics consent without affecting earlier lawful processing. Requests can be sent to [email protected]. You may also lodge a complaint with the President of the Personal Data Protection Office (UODO).

The site does not make automated decisions or profile visitors for advertising.

7. Cookies

Necessary cookies do not track visitors and are used only to provide requested security or account functions. Analytics cookies are not created unless you accept them.