Privacy Policy
Last updated: 12 April 2026
1. Who I Am
This website is operated by Paul Jacobs, sole trader, 43 St. Johns Road, Newport, Isle of Wight, PO30 1LW, United Kingdom.
Paul Jacobs is the data controller for personal data collected through this website. For the purposes of this policy, “I”, “me” and “my” refer to Paul Jacobs.
Contact: contact@pauljacobs.dev
2. Legal Framework
This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you are based in the European Union, the EU GDPR may also apply to your data.
I am registered with the Information Commissioner’s Office (ICO). My ICO registration number is: ZC088609.
3. What Data I Collect and Why
Contact form enquiries
Data collected: Name, email address, subject, and message content.
Purpose: To respond to your enquiry.
Lawful basis: Legitimate interest (Article 6(1)(f) UK GDPR) — I have a legitimate interest in responding to business enquiries sent to me voluntarily.
Retention: Enquiry emails are retained for up to 12 months, then deleted. I do not store contact form submissions in a database.
Website analytics
Data collected: Anonymised usage data including pages visited, time on site, browser type, approximate location (country/city), and device type. Google Analytics 4 does not collect your full IP address.
Purpose: To understand how visitors use the site so I can improve it.
Lawful basis: Consent (Article 6(1)(a) UK GDPR) — analytics only load if you click “Accept” on the cookie banner.
Retention: Google Analytics data is retained for 14 months, as configured in my GA4 account.
Third party: Google Ireland Limited. Google acts as a data processor under a Data Processing Agreement. See Google’s Privacy Policy.
Technical / server data
Data collected: IP address, browser type, referring URL, and timestamps — collected automatically by the web server.
Purpose: Security, fraud prevention, and diagnosing technical problems.
Lawful basis: Legitimate interest (Article 6(1)(f) UK GDPR).
Retention: Server logs are retained for 30 days and then automatically overwritten.
4. Where Your Data Is Stored
This website is hosted by Fasthosts Internet Ltd, a UK-based hosting provider. All data collected through this website is stored on servers located in the United Kingdom.
I do not transfer your personal data outside the UK, with the exception of analytics data processed by Google (see Section 3). Google Ireland Limited participates in the UK-US Data Privacy Framework (UK DPF). Transfers to Google are made on the basis of UK adequacy regulations recognising the UK DPF as providing appropriate safeguards for personal data transferred to the United States.
5. Cookies
I use two categories of cookies on this website:
Strictly necessary cookies
These are required for the website to function (for example, the CSRF security token used on the contact form). They are set automatically and do not require your consent.
Analytics cookies (Google Analytics 4)
These are only set if you click “Accept” on the cookie banner. You can change your preference at any time by clicking Cookie Settings in the footer of any page.
Your cookie preference is stored in your browser’s local storage. It does not expire automatically — you can reset it at any time using the Cookie Settings link in the footer.
6. Third-Party Services
All website scripts, stylesheets, fonts, and icons are self-hosted on UK infrastructure. The only external third-party service this website connects to is:
| Service | Provider | Purpose |
|---|---|---|
| Google Analytics 4 | Google Ireland Ltd | Website analytics — only loaded with your consent |
If you decline analytics cookies, no data is sent to any external service. Google Analytics only loads after you click “Accept” on the cookie banner.
6a. WhatsApp Contact Links
This website includes links that open a WhatsApp conversation. If you click one of these links, your device will connect to Meta Platforms, Inc. (WhatsApp) and any message you send will be processed in accordance with WhatsApp’s Privacy Policy. This transfer is entirely at your discretion — clicking the link is your choice, and no data is sent to WhatsApp unless you actively do so.
7. How I Protect Your Data
- This website is served over HTTPS (TLS encryption in transit)
- Personal data from contact form submissions is transmitted directly to my private email inbox and is not stored in any database on this website
- Application logs do not contain personal data
- Hosting is on UK infrastructure (Fasthosts) with physical security controls
8. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Right of access — You can request a copy of the personal data I hold about you.
- Right to rectification — You can ask me to correct inaccurate data.
- Right to erasure — You can ask me to delete your personal data where there is no compelling reason for me to keep it.
- Right to restriction — You can ask me to restrict processing of your data in certain circumstances.
- Right to object — You can object to processing based on legitimate interest.
- Right to data portability — Where processing is based on consent or a contract and carried out by automated means, you can request your data in a structured, machine-readable format.
- Right to withdraw consent — Where processing is based on consent (e.g. analytics cookies), you can withdraw consent at any time by clicking “Cookie Settings” in the footer.
To exercise any of these rights, email me at contact@pauljacobs.dev. I will respond within 30 days.
9. Right to Complain
If you are unhappy with how I have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:
- Website: ico.org.uk
- Helpline: 0303 123 1113
I would appreciate the opportunity to address your concerns before you contact the ICO, so please get in touch with me first.
10. Changes to This Policy
I may update this privacy policy from time to time. The “Last updated” date at the top of this page reflects when changes were last made. Continued use of the website after changes are posted constitutes acceptance of the updated policy.