Privacy notice.
Short, because there is not much to tell. This site counts visits so I can see which pages are read, and it does that without a cookie, without an advertising network and without anything that identifies you. The only personal information it collects is what you type into the contact form.
Who is responsible
Phil Swindin, trading as Second Lens, based in West Yorkshire and working remotely across the UK. I am the data controller for anything collected here, and there is nobody else to pass you to. You can reach me at [email protected] or on 07711 690822.
What is collected, and why
The contact form
- Your name and email addressRequired, because I cannot reply without them.
- Your organisation and rough headcountOptional. They help me judge whether I am any use to you before I spend your time.
- What you write in the two text boxesWhatever you choose to tell me about your business. Please do not paste anything confidential into a web form on a first contact.
Automatically
- Standard server logsMy host records the usual request information, including IP address, to serve pages and keep the site up. I do not read these for any other purpose.
- A count of the visitWhich page was viewed, which site you came from, the kind of device, roughly how wide the screen is, which country the request came from, how long the page took to load, and whether anything broke. Described in full below.
- Nothing elseNo tracking pixels, no advertising network, no social embeds, no cookies set by this site, and nothing shared with a third-party analytics company.
Counting visits
I wrote the counter myself and it runs on this domain only. It records which page was viewed, which site you came from, the kind of device, roughly how wide the screen is, which country the request came from, how long the page took to load, and whether anything broke.
It sets no cookie. It stores no IP address and no identifier of any kind, so one page view cannot be joined to the next, to a later visit, or to you. The time is rounded to the hour, the screen width to one of five bands, and the location to a country. What is left is a tally, which is all I wanted.
The one thing it can write to your device is the switch below, and only if you use it, because remembering an objection is the only way to honour it. That is why there is no consent banner: nothing is stored on your device unless you ask for it, and nothing kept at my end singles anybody out.
This needs JavaScript, which is also what does the counting: with scripting off, nothing is recorded in the first place.
The lawful basis
Legitimate interests: you have asked me a question and I have an interest in answering it, which is also the outcome you wanted. If we go on to work together, the basis for what I hold after that becomes performance of a contract.
You are not added to a mailing list. There is no mailing list. I will not contact you again about something unrelated, and nothing you send is used to train anything.
Who else can see it
The site is hosted by Netlify, which also receives contact form submissions before they reach me, and my email provider handles the message after that. Both act on my instructions as processors. Nothing is sold, shared with an advertiser, or passed to a partner, because there are no partners.
Form submissions and email may be processed outside the UK by those providers under their standard transfer terms. If that matters to your organisation, email me instead of using the form and say so.
How long it is kept
Enquiries that do not become work are deleted twelve months after the last message between us. Records relating to work I have actually done are kept for six years after the engagement ends, which is the ordinary period for business and tax records. Server logs are kept for as long as the host retains them.
The visit counts are added up into a total for each day and those totals are kept, because how many people read a page is not information about anybody. The individual records they are added up from are deleted after seven days.
If you would rather I deleted something sooner, say so and I will, and I will confirm when it is done.
Your rights
Under UK data protection law you can ask for a copy of what I hold about you, ask me to correct it, ask me to delete it, ask me to restrict what I do with it, and object to my relying on legitimate interests. Email me and I will deal with it inside a month, usually the same week, because there is not much to look through.
If you are not satisfied with how I handle it, you can complain to the Information Commissioner’s Office at ico.org.uk. I would rather you told me first, but it is your right either way.