Privacy policy

Who I am

I'm Robert Boniface, an independent technology consultant, and the sole person behind this site and the business it describes. For the purposes of data protection law, I'm the "data controller" for any personal data collected here. You can reach me at [email protected] about anything in this policy.

What I collect

If you use the enquiry form on the Contact page, I collect whatever you enter: your name, email address, organisation (if you give one), which service you're asking about, an approximate budget (if you give one), and your message.

I don't use tracking cookies, and I don't run any advertising or social-media pixels. The only cookie this site sets itself is a strictly necessary session cookie used to protect the contact form against forgery (CSRF protection); it contains no tracking information and isn't used for analytics or advertising.

Like most web servers, the underlying infrastructure briefly processes your IP address as part of normal request handling and to rate-limit the contact form against spam and abuse. It isn't stored long-term or linked to your enquiry.

Why I collect it

Solely to reply to your enquiry and discuss the work you're asking about, the legal basis is that it's necessary to take steps at your request before entering into a contract, and my legitimate interest in running an enquiry-based consultancy. For analytics, the basis is my legitimate interest in understanding how the site is used and which pages actually lead to enquiries, kept proportionate by using a self-hosted tool that stores nothing on your device and retains no data that identifies you.

How long I keep it

There's no database behind this site, enquiry form submissions are sent straight to my email inbox and nowhere else. I keep that correspondence for as long as it's relevant to our conversation or any work that follows from it, and I periodically delete enquiries that didn't lead anywhere, typically within 24 months. If we go on to work together, correspondence relevant to that engagement is kept in line with normal business and accounting record-keeping requirements.

Who I share it with

Your enquiry passes through a transactional email provider in order to be delivered to my inbox, it doesn't go anywhere beyond that. I don't sell, rent or trade personal data, and I don't share it with anyone else except where I'm legally required to (for example, a lawful request from a UK authority).

Your rights

Under UK GDPR, you can ask me to: confirm what data I hold about you; correct it if it's wrong; delete it; restrict or object to how it's used; or provide a copy in a portable format. Email me at [email protected] and I'll respond within a month. If you're not satisfied with my response, you can complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Keeping this up to date

I'll update this page if what I collect or how I use it changes, and update the date at the top when I do. I'd encourage checking back occasionally if you're a regular visitor, though I don't expect this to change often, this is a small, one-person site, not a growing platform.

Questions

If anything here is unclear, just ask, email [email protected] directly, same as you would for anything else.