Privacy Policy

Last updated: August 2026

Who I am

I'm Keith Bennett, and keithbennett.me is my personal professional site. There are no accounts, no forms, no newsletter, no payments and no advertising on it. I am the data controller for the small amount of personal data the site handles, and you can reach me at [email protected].

This policy is written under the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). It covers this website only.

1. What the site collects, and why

Three things, and nothing else.

Hosting and delivery. The site runs on Cloudflare Pages. Cloudflare processes your IP address, the pages you request and basic request headers in order to serve the site and protect it from attack. My lawful basis is legitimate interests: keeping the site online and secure.

Cookieless analytics. Cloudflare Web Analytics counts page views and referrers for every visitor. It sets no cookies, gives me no way to identify you, and does not follow you to other sites. My lawful basis is legitimate interests: knowing which pages are actually read. Because it sets nothing on your device, it needs no consent.

Google Analytics 4 (property G-4E97TKRTM3), only if you accept. It records the pages you view, your referrer, your device and browser, and an approximate location derived from your IP address, and it sets cookies. It does not load at all unless you press Accept on the cookie banner. My lawful basis is your consent.

If you email or call me, I hold whatever you choose to send. My lawful basis for replying is legitimate interests: responding to someone who has got in touch.

2. Cookies and browser storage

Before you answer the banner, this site sets no cookies at all.

Two items are stored on your own device by the site itself. Neither is sent to any server and neither identifies you:

cookie-consent, which records whether you pressed Accept or Decline so the banner does not keep reappearing.
theme, which records light or dark mode. It is only written if you use the theme toggle.

If you accept, Google sets its analytics cookies (_ga and _ga_G-4E97TKRTM3), which typically expire after two years. Nothing else is set.

You can withdraw consent at any time using the Cookie settings link at the bottom of any page. That deletes Google's cookies from your browser and brings the banner back so you can decline. It cannot undo what Google has already collected, so if you want that stopped everywhere you can use Google's own Analytics opt-out. If I ever add anything else that sets cookies, I will ask again before it runs.

3. Who else is involved

I do not sell, trade or rent personal data, and there are no advertising networks or data brokers involved in this site. Three organisations process data on my behalf:

Cloudflare, Inc. for hosting, content delivery and cookieless analytics.
Google, for Google Analytics 4, and only if you have consented.
Apple, as my email provider, for any correspondence.

Cloudflare and Google both operate global networks, so data may be processed outside the UK, including in the United States. Each publishes the transfer safeguards it relies on, including standard contractual clauses, in its own privacy documentation. Links are at the end of this policy.

4. How long it is kept

Server request logs are held by Cloudflare under its own retention periods. I do not keep a copy of them.

Cloudflare Web Analytics reporting is aggregated, so there are no individual records to retain.

Google Analytics data is retained for 14 months, after which Google deletes it. Aggregated reporting totals are not affected.

Email correspondence is kept while it is relevant, and generally no longer than 24 months unless it relates to ongoing work.

5. Your rights

Under UK data protection law you have the right to:

Ask what personal data I hold about you and get a copy of it.
Have inaccurate data corrected.
Have data erased.
Restrict how I use it.
Object to processing based on legitimate interests.
Receive your data in a portable format.
Withdraw consent to analytics cookies at any time, as described above.

In practice this site holds nothing that identifies you, so most requests will concern email correspondence. Contact me at [email protected] and I will respond within one month.

If you are unhappy with how I have handled your data you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. You do not have to raise it with me first, though I would rather have the chance to put it right.

6. Security

This is a static site. There is no database, no login and no user content, so there is nothing on my side to breach. Pages are served only over HTTPS with a content security policy restricting what can run. Email is held in an account protected by two-factor authentication. No transmission over the internet is ever completely secure, so I cannot promise absolute security.

Coming Soon