TL;DR: barely any data, kept briefly.

What I collect

If you email me, I receive your email address, any name you sign with, and the contents of your message.

If you visit any page, my hosting provider (Cloudflare) logs basic request metadata — IP address, user-agent, path — for a short period for security and abuse prevention. I don't read these logs except to investigate problems.

If you visit any page, you'll see a cookie consent banner asking whether you're okay with Google Analytics. This is opt-in — nothing loads until you click "whatever" (accept), and if you click "you what mate, no thanks" (reject), it never loads. Your choice is saved in your browser so the banner only appears once.

If you accept, Google Analytics collects basic usage data — page views, browser type, rough location (anonymised IP), and referrer. This helps me understand how the site is used and improve it. Google's own privacy policy applies to any data they process.

How long I keep it

Email correspondence is kept for as long as reasonably necessary. Server logs are retained per Cloudflare's defaults, typically a few days.

Who I share it with

Nobody, beyond the providers required to make the site and email function — Cloudflare for hosting, my email provider for mail. I never sell or share data, and I only disclose to authorities if legally compelled.

Your rights

Under UK GDPR you can ask me to provide a copy of any data I hold about you, correct it, delete it, or stop using it. The easiest way to reach me is via LinkedIn and I'll respond promptly.

If I've handled your data badly and not put it right, you can complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.