Inside1. Who I am (the data controller)
This site, "Inside // UnixSingh" at unixsingh.com, is operated by Bikramjeet Singh ("I", "me", "my"), an individual based in the United Kingdom. For anything in this policy, I am the "data controller" responsible for your personal data.
You can reach me about privacy through contact form.
2. What information I collect
Information you give me
When you use the contact form, you provide: your name, your email address, a topic you select, and the message you write. You give this voluntarily so that I can respond.
Information collected automatically
- Security and delivery logs. The site is served through Cloudflare. Like almost every website, the hosting layer may process technical data such as your IP address, browser and device type, the pages you request and timestamps, to deliver the site, keep it secure and prevent abuse.
- Anti-spam checks. The contact form uses a hidden "honeypot" field and Cloudflare Turnstile, a privacy-focused challenge that helps tell humans from bots. Turnstile processes limited technical signals from your browser for this purpose.
- Web fonts. Pages load fonts from Google Fonts. When they load, your IP address is disclosed to Google so it can serve the font files.
- Privacy-first analytics. The site may use Cloudflare Web Analytics, which is cookieless and does not track you across sites or build a profile. It records aggregate page-view data only.
I do not run Google Analytics, advertising, or any cross-site tracking, I do not build profiles of you, and there is no account or login on this site.
3. Why I use your data and my lawful basis
Under UK GDPR I must have a lawful basis for using your data. Here is what I do and why:
| Purpose | Data used | Lawful basis |
|---|---|---|
| Read and reply to your enquiry | Name, email, topic, message | Your consent when you submit the form, and my legitimate interests in responding to people who contact me |
| Keep the site secure and stop spam and abuse | IP and technical data, anti-spam signals, honeypot | Legitimate interests (protecting the site and other visitors) |
| Deliver the site and load its assets | IP and request data, font requests | Legitimate interests (running the website you asked to view) |
Where I rely on consent, you can withdraw it at any time (see your rights below). Withdrawing consent does not affect anything done before you withdrew it.
4. Cookies and similar technologies
This site does not use analytics, advertising or tracking cookies, and it does not store marketing identifiers in your browser. The only cookies that may be set are strictly necessary ones:
- Cloudflare may set essential cookies to run its security and performance features.
- Cloudflare Turnstile may set a short-lived token on the contact page to complete its anti-spam check.
The site's analytics (Cloudflare Web Analytics) is cookieless and sets no identifier in your browser, so it does not change this.
Strictly necessary cookies do not require a consent banner under the Privacy and Electronic Communications Regulations (PECR). If I ever add analytics or other non-essential cookies, I will add a proper cookie consent banner first.
5. Who I share your data with
I do not sell your data or share it for marketing. I use a small number of trusted service providers ("processors") who handle data on my behalf:
- Formspree — receives and forwards your contact-form submission to my inbox. See Formspree's privacy policy.
- Cloudflare — hosting, content delivery, security, the Turnstile anti-spam check and cookieless Web Analytics. See Cloudflare's privacy policy.
- Google (Fonts) — serves the web fonts, which discloses your IP to Google. See Google's privacy policy.
- My email provider — I read and reply to your message using my email account, so your message and email address sit in that inbox.
If you click an external link (for example my LinkedIn, GitHub or Buy Me a Coffee), that third party's own privacy policy applies, not this one. I may also disclose data if the law requires it.
6. International data transfers
Some of the providers above (such as Formspree and Google) are based in, or store data in, the United States. Where your data is transferred outside the UK, it is protected by an appropriate safeguard, such as the UK's adequacy regulations (including the UK-US Data Bridge) or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
7. How long I keep your data
- Contact messages: I keep them only as long as needed to deal with your enquiry and for a reasonable period afterwards (normally up to 24 months), then delete them. You can ask me to delete yours sooner.
- Security and delivery logs: retained for a short period by Cloudflare under their own retention schedules.
8. Your rights
Under UK GDPR you have the right to:
- be informed about how your data is used (this policy);
- access a copy of the data I hold about you;
- have inaccurate data corrected;
- have your data erased ("right to be forgotten");
- restrict or object to how I use it;
- data portability; and
- withdraw consent at any time.
There is no automated decision-making or profiling on this site. To exercise any right, contact me through contact form. I will respond within one month, and it is free unless a request is clearly unfounded or excessive.
9. How I protect your data
The site is served over HTTPS and I use reputable providers with their own security controls. No method of transmission or storage is ever completely secure, so I cannot guarantee absolute security, but I take reasonable steps to protect your data.
10. Children
This site is not intended for children under 13, and I do not knowingly collect data from them. If you believe a child has sent me personal data, please contact me and I will delete it.
11. Changes to this policy
I may update this policy from time to time. The "last updated" date at the top shows the current version. Significant changes will be reflected here, so please check back occasionally.
12. Contact
Questions about this policy or your data? Use the contact page. See also the Terms of Use.