This website (tomshephard.com) is a personal portfolio operated by Tom Shephard ("I", "me", "my"). This page explains what personal data the site handles, why, and the choices and rights you have. I aim to collect as little as possible.
For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), I am the data controller for personal data collected through this site. You can contact me using the contact form on the site.
What data I collect
- Contact form submissions. If you use the contact form, I collect the name, email address, and message you provide, so I can read and reply to your enquiry.
- Technical/log data. My hosting provider (Netlify) automatically processes basic technical information such as your IP address and browser type as part of serving and securing the site. This is standard for virtually all websites.
I do not use analytics, advertising, tracking pixels, or profiling, and I do not sell or share your data for marketing.
Why I process it, and the legal basis
- To respond to your enquiry. Legal basis: your consent when you submit the form, and/or my legitimate interest in answering messages sent to me.
- To run and secure the site (including spam protection). Legal basis: legitimate interest in keeping the site available and free from abuse.
Cookies and local storage
This site uses very little. Specifically:
- Theme preference (local storage). If you switch between light and dark mode, your choice is saved in your browser's local storage. It stays on your device, is not sent to me, and is purely functional.
- Google reCAPTCHA (cookies). The contact form uses Google reCAPTCHA to block spam. When it loads, Google may set cookies and collect device/usage information to tell humans from bots. This is governed by Google's Privacy Policy and Terms. If you prefer not to use it, you can email me instead of using the form.
Third-party services
- Netlify hosts the site and processes contact-form submissions and technical log data on my behalf. See Netlify's Privacy Policy.
- Google reCAPTCHA provides spam protection on the contact form (see above).
- Fonts. The site's typefaces are self-hosted on this domain, so loading them sends no request, and therefore no data, to Google or any other third party.
How long I keep it
When you submit the contact form, Netlify stores the submission in their forms interface and sends me an email notification containing your details. That email sits in my inbox and is not routinely deleted. If you would like your submission removed, contact me and I will delete the email and request removal from Netlify's interface. Technical log data is retained by Netlify for a limited period under their own policies.
Your rights
Under UK data protection law you have the right to access, correct, or erase your personal data; to restrict or object to its processing; to data portability; and to withdraw consent at any time. To exercise any of these, contact me through the site and I'll respond.
If you believe I've handled your data improperly, you can complain to the UK's regulator, the Information Commissioner's Office (ICO), at ico.org.uk.
External links
This site links to external sites (for example LinkedIn and GitHub). I'm not responsible for the content or privacy practices of those sites; their own policies apply once you leave here.
Children
This site is a personal portfolio and is not directed at children, and I do not knowingly collect data from them.
Changes to this policy
I may update this policy from time to time. The "last updated" date above reflects the latest version.
Contact
For any privacy question or request, please use the contact form on the homepage.
Disclaimer. This website and its content are provided for general information on a personal, "as is" basis, without warranties of any kind. While I try to keep it accurate and up to date, I make no guarantees and accept no liability for any loss arising from use of or reliance on the site or any site it links to. Nothing here is professional advice.