Privacy Policy

The controller responsible for processing your personal data within the meaning of the EU General Data Protection Regulation (GDPR) is:

When you visit this website, we may collect the following information:

• IP address (anonymized by Google Analytics before being stored)
• Browser type and version, operating system, device category, screen resolution
• Referring URL and pages viewed on this site
• Approximate location (country / region) derived from your IP address
• Interaction events (e.g. page views, button clicks, form submissions)
• If you contact us through the form: name, email address, message content, and any other information you choose to provide

We process this data for the following purposes:

• To operate, maintain, and improve this website and the services we offer
• To analyse aggregate usage and traffic patterns so we can make the site more useful to our visitors
• To respond to enquiries you submit through the contact form
• To protect this site against abuse and spam

The legal basis for processing the analytics data described above is your consent, given through the cookie banner shown on your first visit (Article 6(1)(a) GDPR). The legal basis for processing data you submit via the contact form is the performance of pre-contractual measures and our legitimate interest in responding to your enquiry (Article 6(1)(b) and (f) GDPR).

You may withdraw your consent at any time using the button below.

We rely on the following third-party processors. Each provider acts under a data-processing agreement with us where required by GDPR.

• Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Used to measure website traffic and engagement. IP addresses are anonymized. Google may transfer data to servers in the United States; transfers are governed by the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.
• Formspark (Pageclip, LLC). Used to deliver messages submitted through the contact form to our email inbox. Data is processed only for the duration of message delivery.
• Botpoison (Pageclip, LLC). Used to filter spam from the contact form. Processes a short-lived challenge token; no persistent personal data is stored.
• Vercel (Vercel Inc.). Hosts the website and serves requests from edge locations. Server logs may temporarily contain IP addresses for the purpose of operating the service.

• Analytics data in Google Analytics 4: retained for 14 months from the date of collection, after which it is automatically deleted.
• Contact-form submissions: retained in our email system only for as long as is necessary to answer your enquiry and, where applicable, to comply with statutory record-keeping obligations.
• Server logs: retained for a short, security-related period by our hosting provider, then automatically rotated.

Some of the third-party providers listed above are based outside the European Economic Area, including in the United States. Where this is the case, the transfer is governed by the European Commission's Standard Contractual Clauses and any additional safeguards required by GDPR. You may request a copy of the relevant clauses by writing to the email address listed in section 1.

Under the GDPR you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to legal retention
• Restrict or object to certain processing
• Receive your data in a portable, machine-readable form
• Withdraw consent at any time
• Lodge a complaint with the supervisory authority in your country

To exercise any of these rights, please contact us at the email address listed in section 1. We will respond within the statutory time limit.

You can review or change your cookie preferences at any time. Opening the settings will let you accept or reject analytics cookies. Your choice is stored in a first-party cookie for up to one year.