How this website handles your data

Who is responsible for your data

This website is run by Nicolaie Cristea, a self-employed sole trader based in Nuneaton, England. I am the controller of the personal data described here. For anything about your data, email me if we are already in touch, or use the contact form, and start your message with "Privacy request". Email is preferred, because it gives us both a clear written record.

What I collect and why

Contact and enquiry forms

• What: your name, company if you give one, email address, your message, and an image if you choose to attach one.
• Why: to reply, to discuss and quote for work, and to keep a record of our conversation.
• Lawful basis: steps you asked for before a contract, and my legitimate interest in answering enquiries.
• Your message is delivered to my business inbox, and a copy is sent to me as an instant Telegram alert.

Clients

• What: contact details, quotes, invoices, and the work records needed to deliver the service.
• Lawful basis: contract, and legal obligation for tax records.

Free tools: website check and project brief

• What: for the website check, the web address you enter and the results, plus your email address if you ask for the report by email. For the project brief, your answers and the contact details you give at the end.
• Why: to show, download or email your report, and to read your brief so I can reply and quote. A copy of the brief goes to you only if you ask for one.
• Lawful basis: steps you asked for before a contract, and my legitimate interest in answering enquiries.
• To suggest a few tailored follow-up questions, your brief answers are passed to an automated text service with names, email addresses, phone numbers and web addresses removed first. Your contact details are never passed on.
• Ask me and I will delete your check or brief.

Security and reliability

• What: when a request looks suspicious, is blocked or causes an error, I record the IP address, the page requested, browser details and the time.
• Why: to protect the site from spam and attacks, and to fix faults.
• Lawful basis: legitimate interests.

Optional analytics, only if you choose "Accept analytics"

• What: the pages you visit, your IP address, browser and device type, the referring website or search, your screen size, language and time zone, and connection type.
• Why: to understand which pages help people and to find technical problems.
• Lawful basis: your consent. You can withdraw it at any time with the Cookie choices link on every page.

I do not sell your data, I do not use it for advertising, and I do not make automated decisions about you.

Cookies

• Essential, always on: one cookie, ncristea_cookie_pref, remembers your cookie choice. The site needs it to respect that choice, so it does not need consent.
• Optional: nothing is collected for analytics unless you choose "Accept analytics". Choosing "Essential only", or doing nothing, keeps analytics off.
• No advertising or social media tracking cookies are used, and no third-party analytics scripts are loaded.

How long I keep it

• Enquiries that do not lead to work: 2 years after our last contact.
• Client records and invoices: 6 years, as HMRC requires.
• Security logs and analytics: 12 months, then deleted automatically.

Who else handles it

These companies process data for me under contract, only to provide their service:

• My web hosting provider, which stores the website and its data.
• Namecheap, for business email.
• Cloudflare, for security and fast delivery of the site. Cloudflare handles every visit to protect the site.
• Telegram, for instant alerts of new contact messages and free-tool requests to my phone.
• An automated text service, which suggests the tailored follow-up questions in the project brief. It receives your answers with names, email addresses, phone numbers and web addresses removed, and never your contact details.

Some of these providers may process data outside the UK, for example in the United States. Where that happens, it is covered by UK adequacy regulations, such as the UK-US data bridge, or by standard contractual safeguards.

I may also share data if the law requires it, or to protect the site against fraud or abuse.

Your rights

Under UK data protection law you can ask me to:

• give you a copy of your data;
• correct it;
• delete it;
• restrict or object to how I use it;
• transfer it to someone else.

You can also withdraw your consent to analytics at any time. I reply within one month. There is no charge, unless a request is clearly unfounded or excessive.

If you are unhappy with how I handle your data, please tell me first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or call 0303 123 1113.

Children

This website is for businesses and adults. It is not aimed at children, and I do not knowingly collect children's data.

Changes

If this notice changes, the "Last updated" date at the top changes with it.