Privacy & cookies

1. Who is responsible

I am Dan Hughes, an independent consultant based in London, United Kingdom, and the controller of personal information handled for this website and enquiries about my services. Contact me at hey@danhughes.co with privacy questions or requests.

2. Information and how it is used

If you email me, I receive your email address, any name and contact details you provide, and the contents of your message. I use this information to respond, discuss potential work and keep relevant correspondence. Please only send information needed for your enquiry.

I rely on my legitimate interests in responding to business enquiries and managing correspondence. Where you ask me to take steps towards a contract with you, or information is needed to fulfil that contract, I rely on that contractual basis. I may also retain information where necessary to comply with legal obligations.

When you visit, the hosting infrastructure processes technical information such as your IP address, requested pages, browser information and request times to deliver the website and maintain security. My lawful basis is my legitimate interest in running a reliable, secure website.

You do not need an account, and this website does not take payments or provide a contact form.

3. Website delivery and service providers

The website is hosted using Google Cloud Run. Hosting and email service providers process information as needed to deliver the website and handle correspondence.

The website also loads typefaces from Adobe Fonts. Your browser connects to Adobe to retrieve them, which sends technical information including your IP address and the hostname of this website. Adobe states that it does not store that IP address or set or use cookies to serve these fonts. Read the Adobe Fonts privacy notice for details.

I do not sell your personal information. Information may be shared with professional advisers or public authorities where necessary for legal obligations or to establish, exercise or defend legal claims.

4. Google Analytics 4

With your permission, I use Google Analytics 4 (GA4) to understand how people find and use this website and improve its content. Analytics is optional and only runs if you accept analytics cookies.

GA4 can collect information such as pages viewed, interactions, referring websites, browser and device details, approximate location and identifiers used to distinguish visits. It uses first-party cookies, commonly named _ga and _ga_<container-id>. These cookies expire after up to 180 days, although browser limits can shorten this. Cookie expiry is separate from how long analytics data is retained. Google signals and advertising personalisation are disabled in this website’s analytics setup.

The lawful basis for analytics is your consent. Google’s analytics script is not loaded before you accept. You can accept or reject analytics in the cookie banner and change your choice at any time using Cookie settings in the footer. Withdrawing consent stops further analytics collection and removes this website’s GA4 cookies; it does not affect the lawfulness of earlier processing. Browsing this website or accepting its Terms of Service does not give consent.

For information about Google’s processing, see How Google uses information from sites or apps that use its services and Google’s Privacy Policy.

5. Cookies and your choices

Analytics cookies are only set if you accept them. You can reject analytics and still use the whole website. This website does not use advertising cookies.

Your accept or reject choice is stored in your browser’s local storage under danhughes-cookie-consent for 180 days so you are not asked on every visit. This preference storage is used only to remember your privacy choice. You will be asked again when it expires or the consent notice changes. Your choice applies to this browser and device; if browser storage is unavailable or cleared, you may be asked again.

Use Cookie settings in the footer to review or change your choice. You can also manage or delete cookies using your browser settings. Blocking cookies does not prevent you from reading this website.

6. Retention and international processing

I keep enquiry and correspondence information only as long as reasonably needed to handle the enquiry, maintain a relevant business relationship, meet legal obligations or resolve disputes. The period depends on the nature of the correspondence and whether it leads to paid work. Information that is no longer needed is deleted.

Service providers may process personal information outside the United Kingdom. Where a transfer is restricted by UK data protection law, an applicable adequacy decision or appropriate contractual safeguards are required. You can contact me for information about the safeguards applicable to your data.

7. Your rights

Depending on the circumstances, you can ask to access, correct or erase your personal information, restrict its use, receive it in a portable format, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of earlier processing.

Email hey@danhughes.co to exercise your rights. You can also complain to the UK Information Commissioner’s Office through the ICO’s complaints service.

8. Updates

This notice will be updated when the website’s handling of personal information changes. The date above shows when it was last revised.