Privacy Policy
Last updated: [DATE]
This policy explains what happens to your information when you use this website. It covers the website only. If you go on to engage me for a security audit, how I handle your systems and any data I encounter during that work is governed separately by our written scope and authorization agreement, and by any NDA we sign.
Who is responsible for your data
[BUSINESS NAME / YOUR FULL NAME], [ADDRESS], Ireland.
I am the data controller for the information described below. You can reach me at [EMAIL] about anything in this policy.
What I collect, and why
The fit form
If you fill in the form on this site, I collect what you enter: your name, your work email address, what kind of organisation you are, what you built your application with, what backend you’re using, and where you are in your build.
I use this for one thing: deciding whether I can help you and replying to you. If it’s a fit, you’re offered a call. If it isn’t, I tell you so and send you the written teardown if you want it.
Lawful basis: legitimate interests, responding to a business enquiry you initiated. Where I send you the teardown or any follow-up material, that’s on the basis of your request.
I do not add you to a marketing list, put you into an automated email sequence, sell your details, or share them with anyone for their own marketing.
Booking a call
Calls are booked through Cal.com, which is a separate service with its own privacy policy. When you book, you give Cal.com your name, email address and whatever else their form asks for, and they pass the booking details to me. Their handling of that information is governed by their policy, not this one.
Lawful basis: legitimate interests, arranging a meeting you asked for.
Video
Videos on this site are hosted by Wistia. When a video loads, Wistia sets cookies and records viewing information, including your IP address, which parts of the video were watched, and an identifier for your browser. I use the aggregate version of this to understand which parts of the video people watch and where they stop.
Lawful basis: consent, where required for non-essential cookies. If you decline or block those cookies, the video still plays.
Wistia’s own privacy policy governs what they do with that information as a service provider.
Server logs
This site is hosted on Vercel. Like any web host, it records standard technical information when a page is requested: IP address, browser type, the page requested and the time. This happens automatically and is used for security and keeping the site running.
Lawful basis: legitimate interests, operating and securing the website.
Who your information goes to
I use a small number of service providers. They process information on my instructions and are not permitted to use it for their own purposes:
| Provider | What it handles |
|---|---|
| Resend | Delivers form submissions to my email inbox |
| Cal.com | Call scheduling |
| Wistia | Video hosting and playback analytics |
| Vercel | Website hosting and server logs |
| [EMAIL PROVIDER] | My email inbox, where your message arrives and is stored |
I do not sell your information, share it with advertisers, or pass it to anyone else. There is one exception: if I’m legally required to disclose something, I will.
Transfers outside the EU/EEA
Some of these providers are based in the United States or process data there. Where that happens, transfers are made under the safeguards permitted by GDPR, such as standard contractual clauses or an adequacy decision, depending on the provider. You can ask me for details of the safeguards that apply to any specific provider.
How long I keep it
- Form submissions and email correspondence: up to 24 months from our last contact, then deleted. If you become a client, records connected to that engagement are kept as long as I’m required to for legal and accounting purposes.
- Booking records: held by Cal.com under their retention policy, and in my calendar and inbox under the timeframe above.
- Video analytics: held by Wistia under their retention policy. I only ever see aggregate figures.
- Server logs: short-term, under Vercel’s standard retention.
You can ask me to delete your information sooner. See below.
Cookies
This site does not use advertising or cross-site tracking cookies.
The cookies that are set come from the embedded Wistia video player and are used to remember playback preferences and measure engagement. If you’d rather not have them, you can block cookies in your browser settings. The site and the videos will still work.
Your rights
Under the GDPR you have the right to:
- Ask what information I hold about you, and get a copy of it
- Have inaccurate information corrected
- Have your information deleted
- Restrict or object to how I’m using it
- Receive your information in a portable format
- Withdraw consent, where I’ve relied on consent, at any time
To exercise any of these, email [EMAIL]. I’ll respond within one month. There’s no charge and you don’t need to give a reason.
If you’re unhappy with how I’ve handled your information, you can complain to the Irish Data Protection Commission at dataprotection.ie, or to the supervisory authority in your own country.
Security
Form submissions are transmitted over HTTPS and delivered to a single mailbox that only I have access to, protected by multi-factor authentication. Access to the underlying database and hosting accounts is restricted to me. I keep the amount of information I collect deliberately small, because the safest data is the data that was never collected.
Children
This site is aimed at businesses. I don’t knowingly collect information from anyone under 18.
Changes to this policy
If this policy changes, the updated version will be posted here with a new date at the top. If the change is significant and affects information I already hold about you, I’ll tell you directly.
Contact
[BUSINESS NAME / YOUR FULL NAME]
[ADDRESS], Ireland
[EMAIL]