Privacy Policy

Last updated: June 2026

1. Who We Are

This website is operated by Mario, a freelance data analyst and developer based in the United Kingdom (Data Controller). The website is accessible at https://mariodata.co.uk.

For any privacy-related enquiries — including exercising your rights under UK GDPR — please contact us directly at: privacy@mariodata.co.uk. We will respond within 30 days.

2. Data We Collect

We collect two categories of data:

a) Data you provide voluntarily (contact form)

• Name — to address you in correspondence
• Email address — to reply to your enquiry
• Message content — the details of your enquiry

This data is submitted via EmailJS and delivered directly to the site owner's email inbox. No contact form data is stored on our servers. We do not operate a database of contact form submissions.

b) Analytics data (only with your consent)

If you accept analytics cookies, we collect the following data automatically when you visit the site:

• IP address (anonymised) — hashed and used only to count unique visitors within a 1-hour window. The raw IP is never stored.
• Page path visited — e.g. / or /#contact
• Referrer domain — the website that linked you here (domain only, no full URL)
• Country — derived from your IP by Vercel's infrastructure (2-letter country code only)

This data is stored in Upstash Redis (EU region) and is used solely for aggregate traffic analytics. No individual user profiles are created. You can opt out at any time by selecting "Essential Only" in the cookie banner.

3. How We Use Your Data

Data submitted via the contact form is used solely to respond to your enquiry. We do not use it for marketing, profiling, or any other purpose. We do not share your data with third parties beyond the transmission services described below.

4. Cookies & Local Storage

This website uses the following storage mechanisms:

• cookie_consent (localStorage) — records your consent choice ("accepted" or "essential"). This is not a tracking cookie; it contains no personal data and is never transmitted to any server.

If you choose "Accept All", our analytics system activates and collects anonymised traffic data as described in Section 2b above. This is the only analytics mechanism on this site — we do not use Google Analytics or any third-party tracking pixels.

If you choose "Essential Only", no analytics data is collected. You can change your preference at any time using the Cookie Preferences link in the footer.

Legal basis: Analytics data is processed on the basis of consent (UK GDPR Art. 6(1)(a)). Contact form data is processed on the basis of legitimate interests (Art. 6(1)(f)) — to respond to a business enquiry you have initiated.

5. Third-Party Services

This site makes use of the following third-party services, each with their own privacy practices:

• EmailJS (Privacy Policy) — used to transmit contact form submissions to the site owner's email. EmailJS is a US-based service. Data transfers from the UK to the US are carried out under Standard Contractual Clauses (SCCs) as provided by EmailJS's data processing terms. Data passes through EmailJS servers but is not stored by them beyond delivery.
• Upstash Redis (Privacy Policy) — used to store anonymised analytics data (page views, hashed IPs, country codes) when you accept analytics cookies. Data is stored in the EU region.
• Vercel (Privacy Policy) — this website is hosted on Vercel's infrastructure. Vercel may log standard web server data (IP address, browser type, pages visited) for security and performance purposes.
• Google Fonts (Privacy Policy) — fonts are loaded asynchronously from Google's CDN. Google may collect standard request data (IP address) when fonts are served. Data transfers from the UK to the US are covered by Google's Standard Contractual Clauses.

6. Your Rights Under UK GDPR / GDPR

As a data subject under UK GDPR (and EU GDPR where applicable), you have the following rights:

• Right of access — you may request a copy of any personal data we hold about you.
• Right to erasure — you may request that we delete your personal data ("right to be forgotten").
• Right to rectification — you may ask us to correct inaccurate data.
• Right to data portability — you may request your data in a portable, machine-readable format.
• Right to object — you may object to the processing of your personal data.
• Right to restrict processing — you may request that we limit how we use your data.

To exercise any of these rights, please contact us via the contact form on the home page. We will respond within 30 days.

If you believe your rights have not been respected, you have the right to lodge a complaint with the UK's Information Commissioner's Office (ICO) at ico.org.uk.

7. Data Retention

Contact form submissions are received via email and retained only as long as necessary to fulfil the business enquiry. We do not maintain a separate database of submissions. You may request deletion of your correspondence at any time.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.