Privacy policy

[TBD: have this policy checked before launch (Legal)]

Last updated: 13 October 2026

Who is responsible for your data

This website is run by Pavlos Nicolaou, who is responsible for (the "controller" of) the personal data described here.

• Address: [TBD: postal address, from Pavlos]
• Email: [TBD: contact email, from Booking & Client Ops]

When you visit this website

This website doesn't use cookies or analytics, and doesn't load anything from other websites. [TBD: after deployment, check on the live site that no cookies are set, because some Cloudflare security features can set their own]

It's hosted by Cloudflare (Cloudflare Pages). To deliver the pages, Cloudflare processes technical data such as your IP address and browser details, on my behalf. [TBD: Legal to confirm Cloudflare's role, where it processes this data and for how long]

When you fill in the "Tell me about your work" form

The form asks for your name, email address and role, what your business does, how many people work there, where it's based and what work you'd like help with. You can also add a phone number, your business name, the tools your team uses, anything else about yourself and how you heard about me.

I use it to:

• read your request and reply to it
• check that the work is something I can take on (see what I won't take on)
• if we work together, prepare for it.

The legal basis is taking steps at your request before we might enter into a contract (GDPR Article 6(1)(b)). If you write on behalf of a company, it's my legitimate interest in replying to business enquiries (Article 6(1)(f)), and you can object to that at any time. [TBD: Legal to confirm the lawful bases]

The form is run by Tally, a Belgian company that stores answers in the EU. Tally emails me a copy of each answer. [TBD: Legal to confirm Tally's processors, and the email provider that holds those emails]

Please don't put passwords, your customers' personal details or anything confidential in the form.

When you email me or book a call

I receive what you send, such as your name, email address and message, and use it to reply. The same legal bases apply as for the form. [TBD: email provider and booking tool, if one is used, from Booking & Client Ops]

How long I keep it

• If we don't end up working together, I delete your answers and our emails six months after we were last in touch.
• If we do work together, I keep what the work needs while it lasts, and what the law requires for tax and accounting records after that.

[TBD: Legal and the accountant to confirm these periods]

Who else sees it

Only the services named above, which process data on my behalf. I don't sell your data, share it for others' marketing, or add you to a mailing list.

Cloudflare is a US company, so some data may be processed outside the EU. [TBD: Legal to confirm the safeguards for this transfer]

Your rights

Under the GDPR, and the UK GDPR if you're in the UK, you can ask me for a copy of your data, to correct it, to delete it, to restrict or object to how I use it, and to receive it in a format you can take elsewhere. Email me at [TBD: contact email, from Booking & Client Ops]. I'll reply within one month.

If you're unhappy with how I've handled your data, you can complain to the data protection authority where you live or work. In Cyprus, that's the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy). In the UK, it's the Information Commissioner's Office (ico.org.uk).

Changes to this policy

If this policy changes, the date at the top changes too.