Privacy Policy

Last updated: 4 November 2026

This page explains what personal data this website collects, what I do with it and what your rights are.

I’m Oscar Beamish, a freelance web developer based in St John’s Wood, London. I’m responsible for your data (the “controller” under UK GDPR). You can reach me at oscarbeamish@gmail.com.

When you send an enquiry

The contact form asks for your name, your email address and your message.

With those, the form also sends a few details about how you found the site: the page you sent it from, the page you first landed on, the website that referred you (if there was one) and any campaign tags in the link you followed, such as utm_source.

On its way to me, the enquiry passes through these services:

  • Cloudflare Turnstile checks the form was sent by a person and not a bot. To do that, Cloudflare looks at information about your browser and connection.
  • SendGrid, run by Twilio, delivers your enquiry to me as an email.
  • Gmail, run by Google, is where that email lands and where I reply from.

The source details (pages, referrer and campaign tags) are also saved in a small database on Cloudflare, so I can see which pages lead to enquiries. That record doesn’t include your name, email address, message or IP address.

I use your details to reply to you and, if we end up working together, to do the work. I won’t add you to a mailing list. I don’t sell your data, and I don’t pass it to anyone other than the services named on this page.

If you become a client

If we work together, I’ll also keep what’s needed to run the project: your contact details, what we’ve agreed, invoices and payments, and the content you send me for your site.

Hosting

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes request data, such as your IP address and browser details, to deliver pages and protect the site from attacks.

Some blog posts use photos loaded directly from Unsplash. When you view one of those posts, your browser fetches the photo from Unsplash, which sees your IP address as part of that request.

Analytics

I use Cloudflare Web Analytics to see how many people visit and which pages they read. It doesn’t use cookies or any storage on your device, and it doesn’t follow you around other websites. I see totals, not individuals.

When you click an email, phone or other contact link on the site, the site records the type of link, the page you clicked it on, the page you first landed on, the referring website, any campaign tags and whether you’re on a mobile or a desktop. Those details are held in the page’s memory while you browse, not in cookies or anything else on your device. The record doesn’t include your name, email address, IP address or anything else that identifies you.

There’s no Google Analytics, no advertising trackers and no tracking pixels.

Cookies

This site doesn’t set any cookies of its own, so there’s no cookie banner.

Cloudflare may set a strictly necessary cookie to protect the site from bots. Cookies like that are allowed without consent under the UK’s cookie rules (PECR), because the site needs them to work safely.

The fonts are served from this site, not from Google Fonts, so loading a page doesn’t send anything to Google.

Why I’m allowed to use your data

UK GDPR needs a lawful basis for each use:

  • Replying to your enquiry is in my legitimate interests (and yours, since you asked me something).
  • Looking after client work is needed for our contract.
  • Cloudflare’s security checks and the anonymous source records are in my legitimate interests in keeping the site safe and knowing which pages work.

How long I keep it

I keep enquiries only as long as I need them to reply, and for any work that follows. You can ask me to delete your details at any time.

Your rights

You can ask me to:

  • give you a copy of the personal data I hold about you
  • correct anything that’s wrong
  • delete your data
  • stop using your data, if you object to how I’m using it

Email oscarbeamish@gmail.com and I’ll sort it out.

If you’re not happy with how I’ve handled your data, you have the right to complain to the Information Commissioner’s Office (ICO). You can do that at ico.org.uk/make-a-complaint.

Changes to this policy

If anything here changes, I’ll update this page. The date at the top shows when it last changed.