Privacy Policy

This Privacy Policy explains what personal information I collect, why I use it and how I look after it. It applies when you:

• Visit this website
• Submit a project enquiry
• Contact me by email
• Discuss or commission a project
• Work with me as a client, supplier or collaborator
• Receive a relevant business communication from me

I am Jeremiah Haastrup, a sole trader based in London, United Kingdom. I am responsible for deciding how the personal information described in this policy is used (the data controller).

I receive information directly from you when you:

• Complete the enquiry form
• Email or otherwise communicate with me
• Request a quotation or proposal
• Enter into a contract with me
• Pay an invoice
• Work with me on a project
• Provide your business contact details during professional communication

Some technical information is collected automatically when you visit. If you accept optional analytics, Google Analytics 4 and Microsoft Clarity also collect information about how you use the website.

I do not buy or rent mailing lists.

I only use personal information where I have a lawful reason to do so.

My legitimate interests include running my business and protecting the website. I also use relevant information to respond to enquiries or manage professional relationships, and where necessary to address legal claims.

Where I rely on legitimate interests, I consider whether that use is necessary and reasonably expected. I also consider whether your rights should take priority.

I may occasionally email existing or prospective business contacts about my work or availability where electronic marketing law allows it.

Depending on the recipient and circumstances, I may rely on legitimate interests or consent. I do not send unsolicited marketing emails to individuals, including sole traders, without consent unless a lawful exception applies.

Every promotional communication will identify me and provide a clear way to ask me to stop. You may object to direct marketing at any time by replying to the email or contacting hello@jeremiahhaastrup.com.

I may retain limited information about an objection so that I can respect it and avoid contacting you again for marketing purposes.

I do not sell your personal information.

The following organisations may receive information where needed to provide their services:

Service providers acting on my behalf are only permitted to process personal information for the relevant service and are expected to maintain appropriate security and confidentiality measures.

Cloudflare, Google and Microsoft operate internationally. Some personal information may therefore be processed or accessed outside the United Kingdom.

Where information is transferred to a country without UK adequacy protection, the transfer must be covered by another legally recognised safeguard. The protection depends on the provider and destination. This may include contractual terms approved for UK data transfers.

You can contact me to ask which protections apply to your information and how to obtain further details.

I keep personal information only for as long as needed for the reason it was collected or for any applicable legal obligations.

Information may be kept for longer where necessary to comply with the law, resolve a dispute, investigate an incident or establish or defend a legal claim.

When information is no longer required, I will delete it securely or anonymise it where appropriate.

This website uses cookies and similar technologies to function and protect itself. With your permission, it also uses them for analytics. Cookies are small files saved in your browser. They can expire earlier than the periods shown below if your browser restricts them.

The table lists cookies identified on this website. The durations describe how long they can remain in your browser. This is separate from how long providers keep their analytics records.

Some providers may also use cookies on their own domains, subject to your consent and browser settings. Other security cookies may appear when needed. Google and Microsoft explain their technologies in the privacy information linked above. Some cookie expiry dates may refresh during later visits.

Microsoft provides further information about the cookies its service may use in its Clarity cookie documentation.

I take reasonable steps to protect personal information against loss or misuse and prevent access by people who are not authorised.

These measures may include:

• HTTPS encryption
• Secure and reputable service providers
• Access controls and account authentication
• Restricted access to enquiries and client information
• Software and security updates
• Spam and abuse prevention
• Appropriate retention and deletion procedures
• Confidentiality arrangements where information is shared with collaborators or advisers

No internet service or method of electronic storage can guarantee complete security. I take reasonable steps to reduce the risks.

I do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.

Automated security and spam detection systems may analyse or block suspicious form submissions, but they are not used to make significant decisions about you.

Depending on the circumstances, you may have the right to:

• Request access to the personal information I hold about you
• Ask me to correct inaccurate or incomplete information
• Ask me to delete your information
• Ask me to restrict how your information is used
• Object to processing based on legitimate interests
• Receive certain information in a portable format
• Withdraw consent where processing is based on consent
• Complain about how your information has been handled

These rights are not absolute, and a legal exemption may apply in some circumstances.

To exercise a right, contact hello@jeremiahhaastrup.com. I may ask for information needed to confirm your identity before responding.

You will not normally be charged for making a request.

You may contact me if you have concerns or wish to make a complaint about how I have used your personal information.

Email hello@jeremiahhaastrup.com with “Data protection complaint” in the subject line and include:

• Your name and contact details
• A description of your concern
• Any relevant dates or correspondence
• What you would like me to do

I will acknowledge your complaint within 30 days and respond without undue delay. I will explain the outcome when my review is complete.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator responsible for data protection. You can find current complaint and contact information on the ICO website.

This website may contain links to other websites, including social media or client sites.

I am not responsible for how those external organisations collect or use personal information. You should review their privacy notices before providing information to them.

This website and my professional services are not directed at children. I do not knowingly collect personal information from children through the project enquiry form.

If you believe that a child has submitted personal information, please contact me so that I can take appropriate action.

I may update this Privacy Policy if the services I use or the way I handle information changes, or if the law requires it.

The current version will be published on this page with an updated date. If a change substantially affects how existing information is used, I will take reasonable steps to inform the people affected.

For questions, requests or complaints concerning this Privacy Policy or your personal information, contact: