Privacy Policy
How I collect, use, and protect your personal information.
Last updated: May 2026
1. Who I Am
I am Daniel Tamasi, an independent IT consultant based in London, United Kingdom. I am the data controller for personal data collected through this website, www.danieltamasi.com.
You can contact me at: dan@danieltamasi.com
2. What Data I Collect
When you submit the contact form, I collect:
- Your name
- Your email address
- Your company name and job title (optional — only if you choose to provide them)
- A subject and message
- Your IP address (logged automatically for spam and abuse prevention)
I do not collect any other personal data. I do not use tracking pixels, advertising networks, or third-party analytics tools.
3. Why I Collect It
Your contact form data is collected solely to respond to your enquiry. The lawful basis under UK GDPR is legitimate interests — specifically, the mutual interest in communicating about a potential engagement or question.
IP addresses are retained for a short period to identify and block abusive or automated submissions.
4. How Long I Keep It
Contact form submissions are retained for up to 12 months, after which they are deleted. If you request earlier deletion, I will action this promptly (see Your Rights below).
5. Who I Share It With
I do not sell or share your data with third parties for marketing purposes. Your data may pass through the following services as part of normal operation:
- Zoho Mail — used to deliver contact form notifications to my inbox
- My hosting provider — the server infrastructure that runs this website
Both processors handle data only as necessary to provide their services and are bound by their own privacy and data protection commitments.
6. Cookies
This website uses essential cookies only:
- Session cookie — keeps you logged in during your visit and remembers any temporary access permissions you have been granted
- CSRF token — a security measure that protects form submissions from cross-site request forgery attacks
These cookies are strictly necessary for the site to function. They do not track you, are not shared with third parties, and do not require your consent under UK GDPR or PECR. No consent banner is required.
7. Your Rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data I hold about you
- Rectification — ask me to correct inaccurate data
- Erasure — ask me to delete your data
- Restriction — ask me to limit how I use your data
- Objection — object to processing based on legitimate interests
To exercise any of these rights, email me at dan@danieltamasi.com. I will respond within 30 days.
If you are unhappy with how I have handled your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
8. Changes to This Policy
If I make material changes to this policy, I will update the "Last updated" date at the top of this page. I recommend checking back periodically.