Privacy notice

This site belongs to Taner Hassan, an independent consultant working as a sole trader in London, United Kingdom. For anything you send through it, I am the data controller under the UK GDPR and the Data Protection Act 2018.

I handle enquiries myself. Anything in this notice can be taken up with me directly at taner@tanerhassan.com.

I use Cloudflare Web Analytics to understand traffic and improve page performance. Its browser beacon sends page and referral information, a page-load identifier and technical performance data to Cloudflare, including loading and interaction timings.

The reports include visits, page views, referring websites, country, browser and device categories. Cloudflare states that its analytics beacon does not access cookies or persistent browser storage, and that Web Analytics does not fingerprint individuals for analytics. Its beacon documentation explains the measurements and privacy protections, and its Web Analytics FAQ explains sampling and reporting history.

Cloudflare also handles delivery and security for this site. That involves network request information, including IP addresses, separately from the analytics reports. Cloudflare describes its processing in its Privacy Policy.

There are no advertising tags or contact forms on this site.

All pages load their typefaces from this site's own server rather than Google Fonts. Your browser does not contact Google Fonts to load them.

This site offers email and a link to my LinkedIn profile. You choose whether to use either.

If you email taner@tanerhassan.com, I hold your email address, your name if you give it, and whatever you have written, including any attachments and everything that accumulates in the thread as we reply to each other.

The “Arrange a call” link also opens an email. It does not book an appointment or send a message automatically.

The site also links to my LinkedIn profile. Following that link hands you over to LinkedIn, and what happens once you are there is between you and LinkedIn.

LinkedIn may process information outside the UK under the safeguards described in its own privacy policy.

For contact messages, there are three purposes. To read what you sent and answer it. To quote for work, and then to do the work, if that is where the conversation goes. And to keep the business records a UK sole trader is required to keep.

The lawful basis for those messages follows the same shape. A first enquiry rests on legitimate interests: you wrote to me and you expect a reply, and holding your message long enough to give you one is the least I can do with it. Once we are discussing real work it becomes steps taken at your request before entering a contract, and then performance of that contract. Invoices and the correspondence behind them rest on legal obligation, because HMRC requires the records to exist.

Enquiries that do not turn into work are deleted within twelve months. Correspondence and records tied to paid work are kept for six years after the end of the tax year they belong to, which is the period HMRC requires, and deleted after that.

Nothing is sold, rented or handed to anyone for marketing. There is no mailing list, so you cannot end up on one. No automated decision-making or profiling is applied to anything you send.

• 01

  Access. Ask what I hold about you and get a copy of it.

• 02

  Rectification. Have anything inaccurate corrected or completed.

• 03

  Erasure. Have it deleted, except for the records tax law obliges me to keep for six years.

• 04

  Objection and restriction. Object to my holding it on legitimate-interests grounds, or have me pause using it while a question about it is settled.

• 05

  Portability. Ask for a copy in a form you can take elsewhere.

Email me to use any of them. It costs nothing and I will answer within one month. I may ask something to confirm it is really you, which for an email thread usually means no more than replying from the address that sent it.

If you think I have handled your data badly, tell me first at taner@tanerhassan.com and I will put it right. You are not obliged to come to me first, though.

You can complain directly to the Information Commissioner's Office, the UK regulator for data protection, at ico.org.uk, where their current postal and telephone routes are listed. Raising it with them costs nothing and does not affect any other remedy open to you.