Privacy policy.

This site is intentionally minimal. We do not require accounts and do not set tracking cookies for advertising.

The two surfaces where data may be collected are: (a) the contact form, when you choose to submit it, and (b) lightweight, privacy-respecting web analytics if enabled (described below).

When you submit the contact form, we receive the name, email address, company, and message you enter. The form is not stored in a database on this site; each submission is delivered to our inbox as an email and handled as correspondence from then on.

Before a submission is accepted, Cloudflare Turnstile checks that it comes from a person rather than an automated script. To do that, Turnstile evaluates signals from your browser and connection when the Contact page loads. It does not use advertising cookies.

We use what you send to respond, to scope potential engagements, and to keep a record of correspondence. We do not add senders to a marketing list, and we do not share message content with third parties except as needed to deliver it (the email delivery service and the provider that hosts our inbox).

When enabled, this site uses Cloudflare Web Analytics, which is privacy-respecting by design. It does not use cookies, does not fingerprint visitors, and does not collect or store personal data identifying an individual. Cloudflare receives aggregate visit metrics (pages, referrers, device class, country) over the course of producing the analytics product.

If analytics are disabled for a given deployment, no analytics beacon is loaded at all.

The site is hosted on Cloudflare Pages. As a function of serving HTTP requests, the hosting provider may process standard request metadata (IP address, user agent, request path, timestamp) to deliver the site, mitigate abuse, and operate their network.

We do not maintain our own application logs of visitors beyond what the hosting provider holds. Refer to Cloudflare's privacy notice for the specifics of their handling.

The third parties involved in operating this site are limited to: the hosting provider (Cloudflare), the bot-protection service on the contact form (Cloudflare Turnstile), the analytics provider (Cloudflare, where enabled), the service that delivers form submissions as email (Resend), the provider that hosts our inbox, and the domain registrar.

We do not sell, rent, or trade information with third parties.

Contact form submissions and the correspondence that follows are retained for as long as it remains operationally relevant — typically, the duration of an engagement plus a reasonable window thereafter to honour follow-up questions and our own record-keeping needs. After that, correspondence is deleted in routine inbox housekeeping.

Aggregate analytics data is retained per the provider's stated retention period.

Depending on where you are located, you may have rights regarding the personal data we hold about you, including the right to access, correct, port, restrict the processing of, or delete that data, and the right to object to certain processing.

To exercise any of these rights — or simply to ask what we hold about you — send a request through the contact form. We will respond within a reasonable period and will not require a fee or onerous justification.

We apply the same operational rigour to this site that we apply to client work: HTTPS-only delivery, strict transport security, minimal data collection by design, and a small attack surface (no databases, no user accounts, and a single form endpoint that validates its input and is screened for automated abuse).

No system is invulnerable, but we treat any incident affecting personal data with the seriousness the situation requires, including notification where applicable.

If the site adds new data-handling surfaces — for example, a newsletter — this policy will be updated before that surface goes live. Material changes will be noted with a revised effective date.

Questions, requests, or concerns about this policy or our handling of your data can be sent through the contact form.