Privacy Policy

This policy explains how Chris Chalmers (“I”, “me”) handles data in connection with cbchalmers.com. I am the data controller for this site, and I am committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What this site collects

This is a personal portfolio and blog. It has no contact forms, sign-ups, or accounts, so the site collects nothing you type into it. If you want to get in touch, you do so by email or LinkedIn - contact you initiate yourself, using your own email client or account.

Two things are collected automatically when you visit, as with almost any website:

• Technical request data. Like any site, this one receives technical information from your browser on each visit - including your IP address, the pages you view, and general device and browser details - so the hosting platform can serve the page to you.
• Anonymous usage analytics. A privacy-friendly analytics tool records aggregated page views and a few interaction events – for example which blog post or topic was opened, which project was expanded, or that a contact button was used. These note what was clicked, not who clicked. See Analytics below.

Analytics

I use Vercel Analytics to understand how the site is used and to improve it. It is cookieless and privacy-friendly: it stores nothing on your device, does not track you across other websites, and does not build a personal profile of you. The data is aggregated and is not used to identify you as an individual. My lawful basis for this is my legitimate interest in understanding and improving how the site performs. No other analytics services, tracking scripts, advertising networks, or social-media pixels are used on this site.

Cookies and local storage

This site sets no analytics or advertising cookies, so there is no cookie banner. The only thing stored is your light / dark theme preference, so the site can remember it. It is held in your browser’s local storage and – so your choice carries across both the main site and the blog subdomain – in a single functional cookie. Like any cookie, that value is sent to the server with each request, but it holds nothing more than “light”, “dark”, or “system” – no identifier, and nothing that identifies you.

Sharing and processors

I do not sell your data, and I do not share it for marketing. The site runs on a single service provider:

• Vercel - hosting and analytics. Receives the technical request data described above on every visit, and provides the aggregated analytics.

If you email me, your message is handled by my own email provider in the ordinary way, so that I can read and reply to it.

International transfers

Vercel is headquartered in the United States and may process data outside the UK. Where data is processed outside the UK, it is protected by appropriate safeguards, such as Standard Contractual Clauses.

Retention

The analytics data described above is aggregated and does not identify you, so it is not linked to you as an individual. If you email me, I keep our correspondence for up to 12 months after our last contact about it - long enough to pick the conversation back up if you get in touch again - and then delete it.

Your rights

You have the right to access, correct, or delete any personal data I hold about you, to object to or restrict its processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, email me at contact@cbchalmers.com. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).

Contact

For any privacy question, reach me by email or via LinkedIn.