Privacy Notice
Last updated: 26 May 2025
1. Who is the data controller?
Alexander Welbourne
Email: alex@welbourne.ai
2. What data do I collect and why?
| Category | Examples | Purpose | Lawful basis |
|---|---|---|---|
| Server access metadata | IP address, user-agent, request details (via hosting/CDN providers) | Operate and secure the website (handled by third-party providers) | Legitimate interests (UK GDPR Art 6 (1)(f)) |
| Emails you send me | Name, email, message content | Respond to your enquiry and keep correspondence records | Legitimate interests (Art 6 (1)(f)) |
No analytics or cookies are set at this time.
If that changes, a banner will request explicit consent before any non-essential cookies are stored (PECR Reg 6).
3. How is your data used?
- Serve the site securely and efficiently (via hosting/CDN providers).
- Reply to messages you send me (emails).
- Data is not used for profiling or automated decision-making.
4. Who can access the data?
This site uses the following third-party infrastructure services:
-
GitHub Pages (GitHub, Inc., part of Microsoft)
GitHub may log access requests, including IP addresses and metadata, to operate and secure its platform.
I do not control GitHub’s log retention period.
See GitHub’s privacy statement: https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement. -
Porkbun CDN
Porkbun may process request data (including IP addresses) to deliver content efficiently and prevent abuse.
I do not control Porkbun’s log retention period.
See Porkbun’s privacy policy: https://porkbun.com/legal/agreement/privacy.
I do not sell or share personal data with third parties for marketing.
If required by law, I may disclose data to competent authorities.
5. International transfers
GitHub and Porkbun may transfer data outside the UK or EEA using appropriate safeguards, such as Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA).
I do not otherwise transfer personal data internationally.
6. How is the data protected?
- HTTPS encryption in transit
- Principle-of-least-privilege repo and account access
- Regular patching and software updates
7. Your rights
You can contact me at any time to exercise your UK GDPR rights:
- Access your data
- Rectify inaccurate data
- Erase your data (“right to be forgotten”)
- Restrict or object to processing
- Data portability
- Lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk)
I will respond within one calendar month.
8. Cookies
No non-essential cookies are set.
If the site adds analytics or embeds third-party widgets that set cookies, a notice will appear asking for opt-in consent before loading them.
9. Changes to this notice
Material changes will be highlighted on this page for at least 30 days.
Previous versions are archived in the public site repository.