• Contact details and messages: if you email me, I receive your name, email address, the content of your message and anything you attach.
• Booking details: if you book a call through Calendly, I receive your name, email address, the time you choose and anything you add to the booking form.
• Work details: if we work together, your job title, company and the information needed to deliver and invoice the work.
• Technical data: when you visit this site, my hosting provider automatically processes information such as your IP address, browser, device and the pages you request, so the site can be delivered securely.
• Usage data: if you accept analytics cookies, Google Analytics collects information about how you use the site, such as the pages you view, how long you stay, the site that referred you, and your approximate location, device and browser.

I don’t knowingly collect special category data, such as health information, and I ask that you don’t send it to me.

I only use your personal data where the law allows me to. The purposes and lawful bases are:

• To reply to your enquiries: legitimate interests in responding to people who contact me.
• To arrange and hold calls you book: steps taken at your request before entering into a contract, or legitimate interests.
• To deliver and invoice work: performance of a contract, if you become a client.
• To keep records the law requires: legal obligation, for example tax records.
• To understand how the site is used: your consent, which you give through the cookie banner.
• To keep this site secure and working: legitimate interests.

Where I rely on legitimate interests, I’ve weighed them against your rights, and you can object at any time. Where I rely on consent, you can withdraw it at any time. I don’t sell your data, use it for advertising, or make decisions about you by automated means.

When you first visit, a cookie banner asks for your choice. You can change it at any time using Cookie preferences at the bottom of every page.

• Strictly necessary: keep the site working securely and remember your cookie choice. These are always on and don’t need your consent.
• Analytics (optional): Google Analytics cookies, such as _ga and _ga_<ID>, help me understand how visitors use the site. They’re only set if you accept them, and last up to 2 years.

I don’t use advertising or marketing cookies.

I only share personal data with trusted providers that help me run this site and my business, and only as far as needed:

• Figma, which hosts this website.
• Google, which provides Google Analytics, if you accept analytics cookies.
• Calendly, which manages call bookings.
• MochaHost, which provides my email and stores our correspondence.
• Professional advisers, such as an accountant, where needed to run my business.

I may also disclose data where the law requires it. Links to LinkedIn, X and Instagram take you to sites run by those companies, which have their own privacy policies.

• Enquiries and call bookings: up to 12 months after our last contact, if we don’t go on to work together.
• Client and financial records: 6 years after our work together ends, in line with HMRC record-keeping rules and the time limit for contract claims.
• Analytics data: 14 months in Google Analytics, then deleted automatically.
• Technical data: in line with my hosting provider’s retention periods.

After that, your data is securely deleted or anonymised.

Under UK data protection law, you have the right to:

• access the personal data I hold about you
• have inaccurate or incomplete data corrected
• have your data deleted
• restrict how I use your data
• object to how I use your data, including where I rely on legitimate interests
• receive your data in a portable format, where this applies
• withdraw your consent at any time, where I rely on it

To use any of these rights, email hello@walecalfos.com. There’s usually no fee. I’ll reply within one month, or tell you if a complex request needs up to two more months.

If you’re unhappy with how I’ve handled your data, please contact me first at hello@walecalfos.com. I’ll acknowledge your complaint within 30 days, look into it promptly and keep you updated.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.