Privacy Policy

Last updated 23 July 2026

Who I am

This site is run by Paul Richardson, trading as byPaul, a freelance web designer based in Spain. I am the data controller for the personal information collected through bypaul.io. You can reach me at hello@bypaul.io.

What I collect and why

Enquiries. When you use the contact form you share your contact details and whatever you tell me about your project, including budget and timeline. I use this to reply to you and to scope the work. The lawful basis is taking steps towards a contract, and legitimate interest in responding to enquiries.

Email. If you email me directly I keep the correspondence for as long as it is relevant to the enquiry or the work.

Calls. If you book a call, the booking runs through Cal.com under its own privacy policy. I receive the name, email address and time you choose.

Analytics. With your consent, the site uses Google Analytics to understand how visitors use it. This only runs if you accept it through the cookie banner. See the Cookie Policy for details.

Who processes it

I use a small number of services to run the site, each acting as a processor.

• Cloudflare hosts the site and handles visitor traffic for security and performance
• Basin receives and stores contact form submissions
• Cal.com handles call bookings
• Google Analytics processes usage data, only with your consent

Some of these providers are based outside Europe. Where that is the case, transfers rely on the safeguards those providers have in place, such as the EU and US data privacy framework or standard contractual clauses.

I never sell personal information, and I do not share it with anyone beyond the services listed above.

How long I keep it

Enquiries and correspondence are kept for as long as they are relevant, then deleted. Records connected to work I have been contracted for are kept for as long as tax and business rules require.

Your rights

Under EU and UK data protection law you can ask for a copy of the information I hold about you, ask for it to be corrected or deleted, object to how it is used, and ask for it to be moved to someone else. Email hello@bypaul.io and I will respond within one month.

If you are unhappy with how I have handled your information you can complain to the Spanish data protection authority at aepd.es, or to the UK's Information Commissioner's Office at ico.org.uk if you are in the UK.

Changes

If this policy changes, the new version appears on this page with an updated date.