PRIVACY

Privacy policy

What I collect, why, who else processes it, and how to exercise your rights under UK GDPR. Short version — only what the contact form posts, plus optional anonymised analytics.

Privacy

This site is run by Tomasz Turczyński trading as Turczynski Interactive Ltd. (registered office: 124 City Road, London EC1V 2NX). I am the data controller for everything here.

What I collect

  • Contact form submissions. When you fill in the form on /contact I receive your name, email address, and the message you typed, plus any subject line you provided.
  • Analytics, when enabled. With analytics on (see cookie policy), Google Analytics 4 collects standard pageview data with your IP address anonymised at collection.

I do not collect anything else. There are no accounts, no profiles, no behavioural advertising, no fingerprinting.

Why, and on what lawful basis

  • Contact form — to read your message and reply. Lawful basis: legitimate interest (responding to enquiries you initiated) and, where relevant, steps prior to a contract.
  • Analytics — to understand which pages get read and how visitors arrive. Lawful basis: legitimate interest (running and improving a small, mostly informational site), with IP anonymisation and short retention as risk-reducing measures.

Who else handles it

  • Web3Forms (web3forms.com) processes contact-form submissions and delivers them to my inbox. See their privacy policy.
  • Google Analytics (Google LLC) processes anonymised analytics telemetry, when analytics is enabled.

No data is sold, rented, or shared with anyone for advertising purposes.

How long it is kept

  • Contact form messages — kept while they are useful for our exchange and for up to 24 months after the last reply, then deleted unless we are in a continuing engagement.
  • Web3Forms dashboard copies — kept per Web3Forms’ retention; I download what I need and rely on email as the system of record.
  • Analytics — Google’s default of 14 months at time of writing.

Your rights under UK GDPR

You have the right to:

  • access the personal data I hold about you,
  • ask for it to be corrected,
  • ask for it to be deleted,
  • object to processing based on legitimate interest,
  • complain to the UK regulator, the Information Commissioner’s Office.

To exercise any of these, use the /contact form. Subject-access requests are answered within 30 days, usually much sooner.

Changes

If the policy changes materially I will update the page and bump the date in the footer of the source.

Last updated: 25 April 2026.