PRIVACY POLICY

Who this covers

This policy explains how michael-jones.org (this site) collects, uses and protects personal data, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What data is collected

The only personal data actively collected is what you choose to submit through the booking form on the /book page: your name, email address, and optionally your company, preferred time and a message describing what you need. This is submitted only when you fill in and send the form yourself — nothing is collected automatically from visitors browsing the site.

If you use the “Book my Cal” button to schedule a call directly, that booking is handled by Cal.com under its own privacy policy, and any details you provide there (name, email, chosen time) are processed by Cal.com as a separate data controller for that booking.

Why it’s collected and how it’s used

Booking form submissions are used solely to respond to your enquiry — to get in touch, discuss the work you’re asking about, and arrange next steps. The legal basis for this processing is your consent, given by submitting the form, and Michael Jones’s legitimate interest in responding to business enquiries.

Where data is stored

Booking submissions are stored in a Supabase-hosted database. Supabase acts as a data processor for this purpose. Access to submitted data is restricted to Michael Jones. Data is kept only for as long as needed to respond to and follow up on the enquiry, and is deleted when no longer needed.

Cookies and third-party services

This site itself does not set tracking or advertising cookies. The following third-party embeds may set their own cookies when you actively use them:

• Cal.com — powers the “Book my Cal” scheduling widget. Cookies may be set when you open or use the booking calendar.
• Cloudflare — this site is hosted on Cloudflare, which may use essential cookies or similar technologies required to serve the site securely.

If Google Ads or analytics tools (such as Google Analytics) are added to this site in future, this policy will be updated accordingly and the existing cookie consent mechanism will govern any non-essential tracking cookies before they are set.

Search engine indexing

This site is registered with Google Search Console, a free tool Google provides to site owners. Search Console does not run any script in your browser and does not set cookies — it simply lets the site owner see how Google’s search crawler indexes and ranks the site’s public pages. It has no access to, and does not collect, any personal data about visitors beyond what is already publicly visible on the site.

Your rights under UK GDPR

You have the right to:

• Ask what personal data is held about you
• Ask for inaccurate data to be corrected
• Ask for your data to be deleted
• Object to or restrict how your data is used
• Ask for a copy of your data in a portable format
• Complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk if you believe your data has been mishandled

To exercise any of these rights, contact michael@michael-jones.org.

Children’s privacy

This site is not directed at children and does not knowingly collect data from anyone under 16.

Changes to this policy

This policy may be updated from time to time as the site changes. The “last updated” date at the top of this page will reflect the most recent revision.

Contact

Questions about this policy or your data can be sent to michael@michael-jones.org.