Privacy Policy
Who is responsible for your data
This website is operated by Jonathon Roberts, based in the United Kingdom, who acts as the data controller. You can contact me via thecontact page or at jonathon@jonathonroberts.co.uk.
What information is collected and how
- Information you provide: name, email address, organisation and message content when you use the contact form.
- Automatic data: IP address, device and browser details, and pages viewed, collected in standard server logs for security and performance.
- Cookies: only set where needed for security or, with your consent, analytics. Details below.
Why your data is used
- To reply to enquiries you send through the contact form.
- To keep the site secure (bot and abuse checks).
- To understand aggregated site usage, only if you accept analytics cookies.
Legal basis for processing
Under UK GDPR and the Data Protection Act 2018, processing is based on:
- Consent – for analytics cookies and any tracking technologies. You can withdraw consent at any time by clearing your cookies or contacting me.
- Legitimate interests – to operate, secure and improve the site, and to respond to enquiries.
- Contract – to take steps at your request, for example discussing speaking engagements.
Who processes your data
I do not sell or rent personal data. The following providers process data on my behalf:
- Cloudflare – hosts and serves this site (Workers), runs the Turnstile bot check on the contact form, and provides cookieless web analytics. Cloudflare processes IP and request data as a security and delivery function.
- Resend – delivers messages submitted through the contact form to my email address.
- Google Tag Manager – loads measurement tags. If the container includes analytics (such as Google Analytics 4), those tags are held back until you accept analytics cookies, via Google Consent Mode.
- YouTube – embedded videos use youtube-nocookie.com, which avoids tracking cookies until you press play.
- Sanity – hosts the site's editorial content; it does not process visitor data.
Some of these providers are based in the United States. Transfers are covered by the UK-US data bridge or standard contractual clauses, as appropriate.
Cookies on this site
- Strictly necessary: Cloudflare security and Turnstile checks may set short-lived cookies required to protect the site from bots and abuse. These do not require consent under PECR.
- Analytics: only set if you accept the consent banner. Until then, analytics storage is denied by default.
- Your choice: your accept or decline decision is stored in your browser's local storage (not a cookie) so the banner does not reappear.
How long data is kept
Contact form messages are retained in my email inbox only for as long as needed to respond and manage the enquiry. Server logs are retained briefly by Cloudflare for security purposes. Analytics data, where consented, is aggregated and subject to the provider's retention settings.
Your rights
You have rights under UK data protection law, including to:
- Request access to your personal data;
- Request correction of inaccurate or incomplete data;
- Request deletion of your data where applicable;
- Object to or restrict processing in certain circumstances;
- Withdraw consent at any time, without affecting processing carried out before withdrawal;
- Lodge a complaint with the Information Commissioner’s Office (ICO).
Security measures
I use reasonable technical and organisational measures to protect personal data, including secure hosting and encryption where appropriate.
Children’s data
This website is not intended for children under 13 and I do not knowingly collect data relating to children.
Changes to this policy
This policy may be updated to reflect changes in law or services.
Contact
To ask questions or exercise your rights, please use thecontact page.