Privacy notice

I'm Daniel Sanchez Cisneros, an independent consultant based in the UK. Here's how I handle information from this site.

What this site collects

This is a static site served by a Cloudflare Worker. Cloudflare processes requests to serve the site and may log your IP address. The site itself doesn't use cookies, analytics, tracking, or advertising.

The contact form

The contact form asks for your name, email address, and how many engineers you have and what AI tools they already use. When you submit it, your message goes to my email inbox. I use it to reply to you and to discuss consulting work. I won't add you to a marketing list, and I won't sell or share your information.

My lawful basis for this is legitimate interests, under Article 6(1)(f) of the UK GDPR. The interests I rely on are responding to enquiries about my consulting services, and keeping a record of that correspondence.

Who else is involved

Cloudflare does three jobs here: it serves the site, it provides the Turnstile anti-spam filter that blocks automated submissions of the form, and its Email Routing service carries your message to my inbox. That inbox is hosted by Apple, so Apple holds your message too. Cloudflare and Apple are the only other organisations that handle it. There's no analytics, advertising or tracking service on this site, and I don't pass your message on to anyone else.

Where your information goes

Cloudflare and Apple are both US-headquartered, so your message may be transferred outside the UK. Both publish the safeguards they use for that. Cloudflare's data processing addendum applies the European Commission's standard contractual clauses as amended by the UK addendum, and Cloudflare says it has also certified under the EU-US Data Privacy Framework and the UK extension to it. Apple's privacy policy says its international transfer of personal data collected in the United Kingdom is governed by standard contractual clauses. Both documents are public: read Cloudflare's and Apple's.

How long I keep it

If an enquiry doesn't lead to work, I delete it and your details after 24 months. If it does lead to work, I keep the correspondence as a business record of that work.

Your rights

Email contact@dsanchezcisneros.com to ask what I hold about you, ask me to correct it, or ask me to delete it. You can also ask me to limit what I do with it, which the law calls restriction of processing. Because I rely on legitimate interests rather than your consent, you have the right to object to my using your information at all: tell me, and I'll stop unless I have compelling grounds that override your objection. UK data protection law applies to how I handle your information, and you can complain to the Information Commissioner's Office (ico.org.uk) if you're unhappy with how I've treated it.

Changes to this notice

I may update this from time to time. The current version is always here.