Privacy notice

This notice explains how Alex Wolf (the controller) handles personal data collected through alexwolf.co.uk. It is written under the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Who is the controller

Alex Wolf, sole controller. Contact: alex@liberating-brilliance.com.

What is collected

When you submit the “Work with me” enquiry form, the following is collected and sent by email:

• Your name
• Your email address
• The context you select
• The message you write

For rate-limiting only, your IP address is hashed (SHA-256) before being stored by our processor. The raw IP is not retained and the hash cannot be reversed to identify you.

The site uses cookieless analytics that record aggregate page views without identifying individual visitors. No tracking cookies, no advertising pixels, no cross-site identifiers.

Why it is collected

Enquiry data is processed under the lawful basis of legitimate interest (responding to a request you initiated). Aggregate analytics data is processed under legitimate interest for understanding which content is useful.

Who processes it

The following processors handle data on our behalf:

• Vercel — hosts the site and serves pages.
• Resend — delivers enquiry emails to the controller’s inbox.
• Upstash — stores hashed rate-limit counters so the form is not abused.
• Sentry (EU region, Frankfurt) — captures application errors so we can fix bugs. Configured to strip request bodies, cookies, and form fields before any error is sent.

Some of these processors are based outside the UK or EEA. Transfers rely on the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses with the UK Addendum, as published by the ICO.

How long it is kept

Enquiry data is retained for up to 24 months from our last meaningful contact, after which it is deleted. You can request earlier deletion at any time by emailing alex@liberating-brilliance.com. Hashed rate-limit counters expire automatically within one hour.

Your rights

You have the right to access, rectify, erase, restrict, object to, and port your personal data. To exercise any of these, email alex@liberating-brilliance.com. We will respond within one month.

If you believe your data is being mishandled, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint.

Security

All traffic to the site is encrypted with TLS. Enquiry emails are sent over authenticated SMTP. Access to the controller’s inbox is protected by multi-factor authentication.

Changes to this notice

Material changes will be reflected by updating the date at the top of this page. The version you read at the time of submission is the version that applies to your data.