Privacy Policy

Data I Collect

Legal basis: Art. 6(1)(b) GDPR — processing necessary for contract performance or pre-contractual enquiries.

When you use the contact form, I collect:

• Your name, email address, project type, and message content.

This information is used solely to respond to your enquiry. I do not use it for marketing or share it with third parties for their own purposes.

Data is retained for the duration of our business relationship and deleted within 12 months after the last contact, unless legal obligations require longer retention.

Third-Party Services

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in operating this website.

• Formspree: Contact form submissions are processed through Formspree, Inc. (USA). Formspree acts as a data processor under Art. 28 GDPR and provides appropriate safeguards for international transfers.
• Google Fonts: This site uses Google Fonts, which may log your IP address when loading fonts. Provider: Google LLC (USA).
• GitHub Pages: The site is hosted on GitHub Pages (GitHub, Inc., USA), which may collect basic server logs including IP addresses.

Cookies & Local Storage

Legal basis: Art. 6(1)(f) GDPR and Art. 5(3) ePrivacy Directive — strictly necessary for website functionality.

This site does not use tracking cookies or analytics. The only data stored in your browser is your theme preference (light/dark mode), which is strictly necessary for the site to function properly.

Your Rights

Under GDPR Articles 15–22, you have the right to:

• Access your data (Art. 15), rectify inaccurate data (Art. 16), request erasure (Art. 17), restrict processing (Art. 18), data portability (Art. 20), and object to processing (Art. 21).

To exercise these rights, contact me at:

pv@nickygrey.com

You also have the right to lodge a complaint with the Luxembourg data protection authority (CNPD) at cnpd.lu.