Privacy Policy
┌──────────────────────────────────────────────────────┐
│ PRIVACY BY ARCHITECTURE: ZERO THIRD-PARTY TRACKING │
├──────────────────────────────────────────────────────┤
│ • Ad Networks: NONE │
│ • Tracking Pixels: NONE │
│ • Google Analytics: NONE │
│ • Cookie Banners: N/A │
│ • Data Sales: NONE │
│ • Server Logs: 30 Days │
└──────────────────────────────────────────────────────┘This website is designed on a direct principle: you should be able to explore technical work, read code documentation, and review project evidence without being tracked across the web.
I do not sell personal data, run third-party advertising scripts, embed social media tracking pixels, or monetise visitor attention. Privacy on this site is maintained through engineering choices, not marketing promises.
1. Data Collection & Usage
A. Contact Forms & Enquiries
When you submit a contact request or initiate a consultation through this website, the information provided (such as your name, email address, and message text) is transmitted directly to my server to allow a direct response.
- Lawful Basis: Legitimate Interests (UK GDPR Article 6(1)(f)) for responding to enquiries and assessing potential professional engagements. Where applicable, processing may also be necessary to take steps at the individual's request before entering into a contract.
- Retention: Enquiries are retained only for as long as reasonably necessary to handle the enquiry, maintain an appropriate professional record, or establish, exercise or defend a legal claim. Records are then securely deleted or anonymised where appropriate.
- Recipients: Enquiry information is accessible only to Mark Ross and, where technically necessary to operate the site, the hosting and email-delivery infrastructure used to process the enquiry. No enquiry data is sold or provided to advertising networks.
- International Transfers: No intentional transfer of enquiry data outside the United Kingdom or applicable approved data-protection territories is made. If a third-party service requiring an international transfer is introduced, this policy will be updated before that processing begins.
- Consent Withdrawal: Where processing is specifically based on consent for a separate purpose, you may withdraw that consent at any time.
B. Server Security Logs
To maintain site availability and defend against automated attacks, brute-force attempts, or denial-of-service activity, the web server automatically records temporary technical logs.
- Data Recorded: IP addresses, browser user-agent strings, access timestamps, requested page URLs, and other limited technical information contained in normal web-server security logs.
- Lawful Basis: Legitimate Interests (UK GDPR Article 6(1)(f)), specifically maintaining availability, security, abuse prevention, and protection of the website and its users.
- Retention: Security logs are automatically rotated and overwritten on a strict 30-day schedule. They are never combined with personal information or shared with commercial entities.
2. Third-Party Services & Analytics
- Analytics: This site does not use third-party tracking suites such as Google Analytics, Adobe Analytics, or Hotjar. Aggregate traffic statistics, if reviewed, rely entirely on privacy-preserving, server-side log counts that do not identify individual visitors.
- Content Delivery & Hosting: The site is served from secure infrastructure hosted within the UK / European Economic Area (EEA), operating under equivalent data protection standards.
3. Your Rights Under UK Data Protection Law
Under the UK GDPR and the Data (Use and Access) Act 2025/2026, you hold specific statutory rights regarding your personal data:
Right of Access
You may request a copy of any personal data held about you (a Subject Access Request).
Right to Erasure
You may request that your contact records or communication history be erased.
Right to Rectification
You may request corrections to inaccurate personal information.
Right to Restrict or Object
You may object to the processing of your data on legitimate interest grounds.
To exercise any of these rights, please submit a direct message through the site contact form ↗. Every submission regarding statutory rights is monitored directly and processed in accordance with UK data protection timelines.
4. Automated Decision-Making
This website does not use automated decision-making or profiling to make decisions about visitors or people submitting enquiries.
5. Regulatory Complaints
If you have concerns about how your data is handled, please reach out directly so it can be resolved. You also have the right to lodge a formal complaint with the UK data protection authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ICO website ↗