What I collect

• Things you send me directly — name, email, project brief — when you fill in a contact form or email me. Stored in my inbox and CRM only as long as needed to discuss and, if we work together, deliver and invoice the project.
• Anonymous usage statistics — page views, country, device class, referrer — through Plausible Analytics. Plausible doesn’t use cookies, doesn’t fingerprint, and doesn’t sell data. Their privacy policy: plausible.io/privacy.
• Hosting logs — your IP address, timestamp, and requested page — kept by Dreamhost for security and rotated within 30 days.

What I don’t do

• I do not sell, rent, trade, or share your data with marketers or data brokers.
• I do not set advertising cookies or pixel trackers.
• I do not build profiles of you across other sites.

Your rights under GDPR

You have the right to ask what data I hold about you, have it corrected, have it deleted, receive a copy in a portable format, and object to processing. Email me and I will reply within 30 days, free of charge.

If you are unhappy with how I have handled your data, you can complain to the Office of the Information and Data Protection Commissioner in Malta.

Third-party services

This site is hosted on Dreamhost. Contact form submissions are delivered via my standard email provider. Analytics are handled by Plausible (cookieless, EU-hosted). If we engage on a project, I may use additional tools (CMS, payments processor, delivery tool) and I will tell you which ones at the start of the project.

Cookies

This site sets no marketing or analytics cookies. WordPress sets essential session cookies when an admin (just me) logs into the dashboard. See the Cookies Policy for full detail.

Changes

If I change this policy materially, I will update the date at the top and, if you are a current client, email you the change.