This is the personal site of Chris Willerton. It is run by Willerton Consulting Ltd, which is responsible for any personal data the site handles. You can reach me about anything on this page by email, at the address in the footer.
The short version: there are no forms, no accounts, no advertising and no tracking cookies. I don't sell or share data with anyone for marketing.
What is collected
Visit statistics. I use Cloudflare Web Analytics to count visits and see which pages are read. It sets no cookies, does not build a profile of you and does not follow you across other sites. It records things like the page, the referring site, your browser and country, in aggregate.
Server records. Like almost every website, the servers that host this site keep short-lived technical logs of requests, including IP addresses, to keep it running and secure.
Error reports. If something breaks, the details are sent to Sentry so I can fix it. These reports are set up not to include personal data, though an IP address or the page you were on can appear in them.
Emails you send me. If you email me, I use what you send only to reply and to keep a record of our conversation.
Cookies
The site sets two cookies, both needed for it to work, so they do not need your consent:
A session cookie, which lets the site keep track of a visit. It lasts two hours.
XSRF-TOKEN, a security token that protects against a kind of attack called cross-site request forgery. It also lasts two hours.
There are no analytics, advertising or social media cookies. Content embedded from elsewhere, such as a video, may set its own cookies under that service's policy.
Who else is involved
These companies process data on my behalf, under their own security and privacy terms:
Laravel Cloud, which hosts the site.
Cloudflare, for the domain, security and visit statistics.
Sentry, for error reports.
My email provider, for messages you send me.
Some of them may handle data outside the UK. Where they do, they rely on safeguards recognised under UK data protection law.
Why, and for how long
Statistics, logs and error reports are kept under legitimate interests: running a site that works and is secure. They are deleted or anonymised on each provider's standard schedule, typically within 90 days. Emails are kept for as long as they are useful for our conversation, and then deleted.
Your rights
Under UK data protection law you can ask to see the personal data I hold about you, to correct it, to have it deleted, or to object to how it is used. Email me and I will reply within a month.
If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Office.
Changes
If how the site works changes, this page will change with it, and the date at the top will say when.