1. Who I Am
This website is run by me, Rhys Hamilton, a freelance web developer based in the UK. I'm the data controller for any personal information collected through it. This policy explains what I collect, why, and what your rights are under UK data protection law.
2. What I Collect
2.1 Information you send me
If you use one of the forms, I receive what you type or choose in it, such as your name, email address, website, phone number and message. If you email me directly, I receive your email address and whatever you choose to include.
2.2 Information collected automatically
I use Umami, a privacy-focused analytics tool, to see aggregate usage such as pages viewed, referrers, browser, device type, and country. It runs without cookies and doesn't store your IP address or build a profile of you across sites. See my Cookie Policy for more.
My hosting provider, Cloudflare, also processes standard request data (which can include your IP address) for security and reliability.
3. How I Use It
- To read and reply to your enquiry, and to discuss working together.
- To understand which pages are useful and improve the site.
- To keep the site secure and prevent spam or abuse.
- To meet legal or accounting obligations, if we end up working together.
I don't sell your information, and I don't use it for marketing unless you ask me to.
4. Legal Basis
- Legitimate interests: replying to enquiries, keeping the site secure, and understanding anonymous usage.
- Contract: where you ask me for a quote or we agree to work together, I use your details to take steps towards or carry out that work.
- Legal obligation: where I'm required to keep records by law.
5. Who I Share It With
I only share information with services that help me run the site:
- Cloudflare: hosts the website, processes form submissions and checks them for bots using Turnstile.
- Resend: delivers form submissions to my inbox by email.
- Umami: provides anonymous analytics.
- My email provider: handles messages sent to my email address.
Some of these providers are based outside the UK, so your information may be processed in other countries. Where that happens, I rely on providers that use recognised safeguards for international transfers. I may also disclose information if the law requires it.
6. How Long I Keep It
I keep contact form messages and emails for up to 12 months after our last conversation, then delete them. If we work together, I keep project and invoicing records for as long as the law requires (currently up to 6 years for accounting records). Anonymous analytics data doesn't identify you.
7. Your Rights
Under UK data protection law, you can ask me to:
- give you a copy of the personal information I hold about you,
- correct anything that's wrong or incomplete,
- delete your information,
- restrict how I use it,
- move it to another provider, or
- stop using it for a particular purpose (you can object where I rely on legitimate interests).
To use any of these rights, contact me using the details below. I'll aim to reply within one month.
8. Security
The site is served over HTTPS, and I only use reputable providers to store and process your information. No online service is completely secure, but I take reasonable steps to protect your data.
9. Third-Party Links
This site may link to other websites. I'm not responsible for their content or privacy practices, so please read their policies.
10. Changes to This Policy
I may update this policy from time to time. The "Last updated" date at the top will change when I do.
11. Contact and Complaints
For questions about this policy or to use your rights, contact me through the contact page or at Email me.
If you're unhappy with how I've handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. I'd appreciate the chance to put things right first.