What I collect, and why.

Who I am

This site is run by SP Business and Investment Group Ltd, registered in England and Wales under company number 14790177, registered office 86-90 Paul Street, London, EC2A 4NE. For anything on this page, write to hello@samuel-pedro.com.

What I collect

• Email address - only if you subscribe. Used to send the notes you asked for, nothing else.
• Contact form - name, email, company, your message and the budget range you pick, so I can reply usefully.
• Booking - if you book a call, the booking tool collects what it needs to make the appointment.
• Analytics - aggregate page counts. No cookies, no cross-site tracking, nothing that identifies you.

Lawful basis

Consent for the email list - explicit, opt-in, never pre-ticked, and withdrawable from any email. Legitimate interests for replying to an enquiry you sent me, and for understanding which pages get read.

How long I keep it

Subscribers: until you unsubscribe, which every email links to. Enquiries: kept for 24 months, then deleted.

Who processes it

These are the third parties the live site actually talks to. The list is derived from what the built site loads, not from memory - if you add a service, it belongs here the same day.

• Vercel - hosting and delivery. Processes the request data any web server sees, including IP address, to serve the page.
• Google Analytics (googletagmanager.com, google-analytics.com) - page and event counts, and only with your consent. Unlike the two above it sets cookies (_ga and _ga_*) and can recognise you on a return visit. Your IP is anonymised before storage, advertising and personalisation signals are switched off, and nothing is sent at all until you say yes.
• Cal.com (cal.com) - booking, and only once you have allowed embedded content. Until then nothing on this site contacts them. After that, loading the calendar sends them a request including your IP address, and booking sends your name, email and whatever you put in the booking form.

Typefaces are served from this domain, not from Google Fonts, so loading a page sends nothing to Google.

Cookies

You are asked on your first visit, and nothing optional runs until you answer. There are three categories, and each one switches something off that would otherwise load - so refusing means the request is never made, not that it is made and left uncounted.

• Strictly necessary - always on. Whether you chose light or dark, and your answer to this question. Both are kept on your device, sent nowhere, and read by nothing else.
• Analytics - Google Analytics. It sets its own cookies and can recognise you on a return visit, which is why this switch matters rather than merely being polite. Refuse and the script is never loaded.
• Embedded content - the Cal.com booking calendar on the contact page, which does set its own cookies. Refuse and it is never loaded, and the page offers a direct booking link instead, so nothing is lost by saying no.

The cookies link in the footer reopens these choices at any time, and changing your mind takes exactly as long as making it up did.

Your rights

You can ask for a copy of what I hold, ask me to correct it, or ask me to delete it. Email hello@samuel-pedro.com and I'll action it. If you're not happy with how I handle that, you can complain to the Information Commissioner's Office at ico.org.uk.