Privacy Notice

Data Protection Matters is a privacy consultancy founded by Gilad Yaron. We help organizations manage data protection, so we hold ourselves to the same standard we ask of our clients. This notice explains, in plain language, what personal data we collect through this website, why we collect it, who else handles it, and what choices you have.

If you have a question about anything here, write to us at gilad@giladyaron.com.

What this notice covers

This notice applies to this website and to enquiries you make through it, including the contact form, our newsletter and the limited analytics and technical data the site uses.

It does not cover the personal data we handle when we work for a client. Client engagements are governed by their own agreement and data processing terms, and in those cases we act on the client's instructions.

What we collect

When you contact us

If you use the contact form, we receive your name, your email address, the message you write and, if you choose to give it, your phone number. Please do not include sensitive information in your message that we do not need in order to reply.

When you subscribe to the newsletter

We collect your email address.

Automatically, when you browse

This site is deliberately light on tracking. For analytics we use Cloudflare Web Analytics, a privacy-first, cookieless tool: it measures page views and site performance without setting cookies, without tracking you across other sites, and without building a profile of you. Cloudflare, which also hosts the site, processes basic technical information, such as the approximate location derived from your IP address, the pages and tools used, and your device and browser type, to produce aggregate statistics and to serve and secure the site. What we keep is statistics only, not personal information: counts of page views and visits, which pages and tools were used, a broad country, and device and browser type. It does not identify you, it is not linked to your name or contact details, and we do not build a profile of you. We do not run third-party advertising trackers.

How we use it and our legal basis

• To reply to your enquiry and provide the information you ask for. Our legal basis is our legitimate interest in responding to people who contact us, and, where you are asking about our services, taking steps at your request before entering into a contract.
• To send you the newsletter. Our legal basis is your consent. You can withdraw it at any time using the unsubscribe link in any message, or by emailing us.
• To keep the site running, secure, and understood. Our legal basis is our legitimate interest in operating a safe, working website and understanding, in aggregate, how it is used. This is supported by our hosting provider's logs and cookieless Cloudflare Web Analytics.

We do not sell your personal data, and we do not use it to make decisions about you by automated means.

The contact form and third parties

Our contact form is processed by FormSubmit, an external form-to-email service. When you submit the form, FormSubmit receives what you entered and transmits it to us by email. Because your message passes through their systems, it is also subject to their own terms and privacy practices.

Our newsletter and hosting providers also process limited data on our behalf, for example your email address, or the technical information needed to serve the site. We choose providers carefully, share only what each one needs, and expect all of them to protect the data and use it only for the purposes we have set.

Some of these providers (including FormSubmit) may be located outside your country or outside the European Economic Area. Where that is the case, we rely on appropriate safeguards for the transfer, such as an adequacy decision or standard contractual clauses. You can ask us for details using the contact address below.

Beyond these providers, we share personal data only where the law requires it or where you ask us to.

How long we keep it

• Enquiries: we keep your message and details only as long as needed to respond and for a reasonable follow-up period afterwards. If the enquiry leads to an engagement, we keep what is needed under the terms of that engagement.
• Newsletter: we keep your email address until you unsubscribe.
• Technical logs: our hosting provider's logs are kept for a short period for security and troubleshooting, then discarded.

Your rights

Depending on where you live, you have the right to:

• ask for access to the personal data we hold about you;
• ask us to correct data that is inaccurate or incomplete;
• ask us to erase your data;
• ask us to restrict how we use your data;
• object to our use of your data, including where we rely on legitimate interest;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting the lawfulness of what we did before; and
• complain to your local data protection supervisory authority.

To exercise any of these rights, email us at gilad@giladyaron.com. We may need to confirm your identity first, and we will respond within the time the law allows. We would also welcome the chance to put things right before you go to a regulator, but you are always free to do so.

Cookies

Cookies are small files that a website places on your device. This site sets no cookies at all. Our analytics, Cloudflare Web Analytics, is cookieless, and we use no advertising or cross-site tracking cookies.

The only thing we may store on your device is an optional local preference, such as remembering a light or dark theme on our tools. That is kept in your browser's own local storage, it is not a cookie, it is never sent to us, and it is not used to track or identify you. If we ever introduce cookies, we will ask for your consent first and set out the details here. You can always clear this stored preference, or block site storage, through your browser settings.

Security

We use reasonable technical and organizational measures to protect personal data against loss, misuse and unauthorized access. These include access controls, encrypted connections to this site and limiting who can see enquiries to the people who need to. No online service can be guaranteed to be completely secure, so please keep that in mind when deciding what to send us.

Changes to this notice

We may update this notice from time to time, for example when our services or the law change. The "Last updated" date at the top shows the latest version. If we make a significant change, we will make it clear on this site.

Contact us

For any question about this notice or about how we handle personal data, email gilad@giladyaron.com or use our contact page.

This notice is provided for transparency and does not constitute legal advice.