Privacy Policy

Who is responsible for your data

Tom Jacobs is the data controller for any personal information you submit through this website. I am a freelance web developer based in Shropshire, England, working with clients across the UK and beyond. You can reach me at [email protected].

What I collect

If you submit the contact form, I collect the details you enter:

• Your name and email address
• Your company (optional)
• The type of enquiry — audience type, project type, services of interest, budget, and timeline
• Your project brief and, if you share one, a reference URL

To keep the form safe from automated spam, I use Cloudflare Turnstile. This checks that you are human using a verification token and your IP address, which Cloudflare processes briefly and does not store in a way that identifies you. A hidden field in the form also helps catch bots — it is never used to identify a real person.

How I use it

Solely to read your enquiry, reply to you, and — if we work together — deliver and support the project. I do not use your information for advertising, and I do not send marketing emails.

The legal basis

Under the UK GDPR, I rely on legitimate interests (Article 6(1)(f)): you have contacted me with an enquiry, and processing your details is necessary to respond and consider the work. This interest never overrides your rights.

Who I share it with

I use a small number of trusted processors to help run the site and reply to you. They only receive what is strictly necessary:

• Elastic Email — to send you the automated confirmation reply. They receive your name and email address for that single message.
• Cloudflare — to verify the contact form is submitted by a person, not a bot.
• The hosting provider for this website, where the enquiry is stored.

I never sell your data, and I do not share it with any advertising networks.

Cookies and analytics

This website does not use cookies. I run a self-hosted, cookieless analytics tool (Umami) that records anonymised, aggregated page views so I can understand which content is useful. It does not track you across other sites, does not use cookies, and is not linked to anything that identifies you.

Because no non-essential cookies are set, there is no cookie banner and nothing to opt out of beyond contacting me.

How long I keep it

Project enquiries are kept for 24 months from the date you submit them, after which they are deleted. If you would like your details removed sooner, just ask and I will delete them without question.

Your rights

Under the UK GDPR you have the right to:

• Access the personal data I hold about you
• Ask me to correct anything that is inaccurate
• Request erasure (“the right to be forgotten”)
• Restrict or object to processing
• Receive a copy of your data in a portable format

To exercise any of these, email [email protected]. If you are unhappy with how I handle your data, you have the right to complain to the Information Commissioner’s Office.

Security

The site is served over HTTPS, enquiries are stored in an access-controlled database, and only I can view submitted leads. No method of transmission or storage is perfectly secure, but I take reasonable steps to protect your information.

Changes to this policy

I may update this policy from time to time. The date above reflects the last revision; any material changes will be reflected here.

Contact

Questions about this policy or your data? Email [email protected] and I will be happy to help.