Skip to content
samuel_pedro
// privacylast updated: 25 august 2026
$ cat privacy.md

What I collect, and why.

Short version: an email address if you give me one, a message if you send one, and privacy-friendly page counts that don't identify you.

Who I am

This site is run by SP Business and Investment Group Ltd, registered in England and Wales under company number 14790177, registered office 86-90 Paul Street, London, EC2A 4NE. For anything on this page, write to hello@samuel-pedro.com.

What I collect

  • Email address - only if you subscribe. Used to send the notes you asked for, nothing else.
  • Contact form - name, email, company, your message and the budget range you pick, so I can reply usefully.
  • Booking - if you book a call, the booking tool collects what it needs to make the appointment.
  • Analytics - aggregate page counts. No cookies, no cross-site tracking, nothing that identifies you.

Lawful basis

Consent for the email list - explicit, opt-in, never pre-ticked, and withdrawable from any email. Legitimate interests for replying to an enquiry you sent me, and for understanding which pages get read.

How long I keep it

Subscribers: until you unsubscribe, which every email links to. Enquiries: kept for 24 months, then deleted.

Who processes it

These are the third parties the live site actually talks to. The list is derived from what the built site loads, not from memory - if you add a service, it belongs here the same day.

  • Vercel - hosting and delivery. Processes the request data any web server sees, including IP address, to serve the page.
  • Vercel Web Analytics (va.vercel-scripts.com) - aggregate page counts. No cookies, and only with your consent.
  • Plausible Analytics (plausible.io) - aggregate page and event counts. No cookies, no cross-site tracking, EU-hosted, and only with your consent.
  • Cal.com (cal.com) - booking, and only once you have allowed embedded content. Until then nothing on this site contacts them. After that, loading the calendar sends them a request including your IP address, and booking sends your name, email and whatever you put in the booking form.

Typefaces are served from this domain, not from Google Fonts, so loading a page sends nothing to Google.

Cookies

You are asked on your first visit, and nothing optional runs until you answer. There are three categories, and each one switches something off that would otherwise load - so refusing means the request is never made, not that it is made and left uncounted.

  • Strictly necessary - always on. Whether you chose light or dark, and your answer to this question. Both are kept on your device, sent nowhere, and read by nothing else.
  • Analytics - Plausible and Vercel Web Analytics. Both count page views without cookies and without identifying you, so strictly they need no consent at all; they are behind this switch anyway. Refuse and neither script is loaded.
  • Embedded content - the Cal.com booking calendar on the contact page, which does set its own cookies. Refuse and it is never loaded, and the page offers a direct booking link instead, so nothing is lost by saying no.

The cookies link in the footer reopens these choices at any time, and changing your mind takes exactly as long as making it up did.

Your rights

You can ask for a copy of what I hold, ask me to correct it, or ask me to delete it. Email hello@samuel-pedro.com and I'll action it. If you're not happy with how I handle that, you can complain to the Information Commissioner's Office at ico.org.uk.