Privacy & Cookies
Last updated: 10 September 2026
Who's responsible for your data
This site is run by Gabriel Carlos, an individual based in London, United Kingdom. For anything on this page, contact gabgabrielgab@gmail.com.
What personal data this site collects
The only personal data collected is what you choose to submit through one of the two forms on the site:
- Project enquiry form — your name, email address, optionally your company, and whatever message you write.
- Crash-course download request — your email address, and which course you asked for.
Nothing is collected automatically. There's no analytics script, no advertising pixel, and no fingerprinting on this site.
Why, and on what legal basis
Data submitted through the forms is used only to respond to you — to reply to an enquiry, or to send a requested download. This relies on legitimate interest in responding to messages sent directly to Gabriel (UK GDPR Art. 6(1)(f)), or, where a contract discussion follows, on steps taken at your request prior to entering a contract (Art. 6(1)(b)). It is never used for marketing, profiling, or sold or rented to anyone.
Who your data is shared with
This site has no server or database of its own — form submissions are delivered by two third-party services acting as data processors:
- FormSubmit — delivers the project enquiry form as an email. See FormSubmit's privacy policy.
- EmailJS — delivers crash-course downloads by email. See EmailJS's privacy policy.
Both may process data on servers outside the UK/EEA. Beyond that, your message simply arrives as an email in Gabriel's own inbox — it isn't copied anywhere else.
How long data is kept
This site doesn't retain anything itself — there's nothing here to delete a record from. Emails that reach Gabriel's inbox are kept only as long as needed to handle your enquiry, then deleted at his discretion, subject to his own email provider's standard retention.
Cookies and local storage
This site does not set any cookies. It does use one small piece of local storage in your browser — a flag remembering that you've seen the privacy notice banner, so it doesn't reappear on every visit. That flag stays on your device, is never sent anywhere, doesn't identify you, and isn't used for tracking. Under UK/EU rules this counts as "strictly necessary" and doesn't require consent — but you're free to clear it any time via your browser's site data settings, and the notice will simply reappear.
If that ever changes — for example, if analytics are added later — this page and the notice banner will be updated first, and any non-essential cookie will only be set after you actively agree to it.
Your rights
Under UK and EU GDPR, you have the right to:
- Ask what personal data is held about you, and get a copy of it.
- Have inaccurate data corrected.
- Ask for your data to be deleted.
- Object to how it's used, or ask for its use to be restricted.
- Lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office (ICO).
To exercise any of these, email gabgabrielgab@gmail.com directly.
Children
This site is a professional portfolio and isn't directed at children. It doesn't knowingly collect data from anyone under 16.
Changes to this page
This policy may be updated as the site changes. Material changes — anything that changes what's collected or why — will be reflected here with an updated date at the top.