Privacy policy
This site is a one-page consultancy site with an enquiry form. It collects as little as it can get away with, and this page says exactly what that is.
Who is responsible for your data
Carlos Real, is the data controller for this website.
If you have a question about any of this, or you want your data removed, email carlos@carlosreal.co.uk and it will be dealt with.
What is collected, and why
The enquiry form collects your name, email address, and your message. Company and phone number are optional. This is used for one purpose: to read your enquiry and reply to it.
Your IP address and browser user-agent are recorded alongside the enquiry. That is used only to stop the form being abused by bots, and it is deleted after 30 days.
Nothing you send is sold, or shared with anyone for their own purposes.
The lawful basis
For enquiries, the lawful basis is legitimate interests: you asked to be contacted about a possible piece of work, and replying is what you expect to happen.
For the spam controls, the lawful basis is also legitimate interests, specifically keeping the site usable.
Who else can see it
Three processors handle data on this site:
- Vercel, which hosts the site and processes server logs. Data is processed in the EU and US under standard contractual clauses.
- Supabase, which stores enquiries in a database hosted in the EU.
- Resend, which delivers the notification email and your confirmation email.
How long it is kept
Enquiries are kept for up to 24 months so there is a record of the conversation, then deleted automatically. IP addresses and user-agent strings are cleared after 30 days.
If we end up working together, our contract and the records that go with it are kept for as long as UK law requires.
Cookies and analytics
This site sets cookies for analytics and advertising or tracking.
Your rights
Under UK GDPR you can ask for a copy of the data held about you, ask for it to be corrected or deleted, ask for its use to be restricted, and object to it being processed.
Email carlos@carlosreal.co.uk to exercise any of these.
Changes
If this policy changes, the date at the top changes with it. There is no version history, so if the detail matters to you, keep a copy of what you agreed to.