privacy - what this site collects, and why so little

This notice is given under the UK General Data Protection Regulation and the Data Protection Act 2018. The data controller is ByteVortex Labs. Questions about your data go through the contact form.

Browsing

No cookies, no analytics, no fingerprinting, no third-party requests and no JavaScript. The web server keeps a log of requests for security, with the last part of every IP address removed before it is written. Logs are deleted after 14 days.

Cloudflare

The site is delivered through Cloudflare, Inc., which shields it from attacks. Cloudflare sees your IP address and each request as it passes through, and handles them on my behalf as a processor under its data processing addendum. It may do so outside the UK, under the UK Extension to the EU-US Data Privacy Framework. See Cloudflare's privacy policy.

The contact form

The name, email address, organisation and message you choose to send. These are stored on this server, which is in my sole control, so that I can reply. Nothing is emailed. Your IP address is held in memory for up to an hour to stop abuse, and is never written to disk.

Enquiries are handled to take steps at your request before entering into a contract, and under legitimate interests in replying to people who get in touch. Security logs are kept under legitimate interests in keeping the site safe.

An enquiry that does not lead to work is deleted within 12 months. One that does is kept for as long as the engagement and the law require, typically six years for business records.

You may ask for a copy of your data, ask for it to be corrected or erased, and object to how it is used. If you are unhappy with the answer, you can complain to the Information Commissioner's Office.