Privacy Policy

These policies apply to this website. When we publish a mobile app, we will list it below and say what that app collects.

Who we are

This website is published by Demi Taylor Nimmo (“we”, “us”). I am a solo developer. You can contact me at demi.21@outlook.com.

This website is demitaylornimmo.com.

If I change this policy, I’ll update the effective date above, and for significant changes I’ll say so on the site.

This website

This is a public portfolio. You can browse the pages, follow links, send me a message through the Hire me form, email me, or download my CV. There is no visitor account, comments, newsletter, or payment on this site.

What we collect when you visit

Nothing, unless you allow analytics. The first time you visit, a banner asks whether I may count your visit. Until you choose “Allow analytics”, no page-visit record is sent and no visit ID is created. If your browser sends Global Privacy Control or Do Not Track, analytics stays off unless you turn it on yourself.

If you allow analytics, each page you view sends a record to my own API with:

• the page you viewed and its title
• how long you stayed on it (when it is more than a few seconds)
• the site you came from (the referrer), if your browser shares it
• your browser type (the user agent)
• a shortened IP address (the last part removed), which on its own can’t pinpoint your connection
• a random visit ID, kept in your browser and replaced after 30 minutes without a page view

I use this only to see which pages are useful, so I can improve the site. I do not use it to advertise, to profile you, and I do not sell or share it. No third-party analytics or tracking tools are used: the records go to my own database and nowhere else.

Your choice

Analytics is opt-in, and you can change your mind at any time, free of charge, from “Cookie settings” at the bottom of every page. Turning analytics off stops new records straight away and deletes the visit ID from your browser. Your choice itself is stored in your browser (localStorage) so you are not asked again; it is never sent to me. I ask again after six months, and whenever I change what the banner asks for.

“Preferences” is a separate, optional choice. If you allow it, your browser remembers small things such as the home page colour theme. If you don’t, nothing is stored and those choices last only for your visit.

Cookies and similar storage

This site sets no cookies, and no other site sets any through it: images, files and the CV are served from this site’s own address, so your browser never contacts my file host. It uses your browser’s own storage (localStorage, which lasts until it is cleared) for the items below, and only these.

To ask me to delete visit records I already hold, email demi.21@outlook.com.

If you message me through Hire me

When you send a message through the Hire me form, I store:

• what you’re getting in touch about (the option you chose)
• your name, if you give it
• your email address
• your message
• the page you sent it from

I don’t store your IP address or any details of your browser or device with your message. I use these details only to read your message and reply to you. A copy is emailed to me through Resend, an email delivery service that sends it on my behalf. Messages are deleted automatically 12 months after I receive them.

Giving me your details through the form is voluntary, but without an email address I can’t reply. I make no automated decisions about you.

If you email me or download my CV

Email you send directly goes to demi.21@outlook.com from your own mail app. The CV download is a file served from this site; you do not need to register to get it.

Third parties on this site

Fonts, images and files are served from this site, not from Google or my file host. I do not use Google Analytics, advertising SDKs or any other third-party trackers. The host that serves the site (Vercel) may keep standard request logs. Outbound links (for example GitHub or LinkedIn) are those services’ own pages.

How long we keep website data

Page-visit records are kept for 12 months and then deleted. Hire me messages are deleted 12 months after I receive them. Emails you send me directly are kept as ordinary correspondence and deleted when no longer needed.

Who processes data for me

I use these services to run the site. Each one handles data only to provide its service to me:

• Supabase (database and file storage): stores analytics records if you allow them, Hire me messages, the site’s content, and files such as images and the CV.
• Vercel (hosting and serverless functions): serves the website and runs the API that receives page-visit records and Hire me messages. Like any host, it may keep standard request logs.
• Resend (email delivery): sends me a copy of each Hire me message by email, once that is switched on. It receives the message and the details you entered in the form.

These providers may process data outside the UK. Where they do, they rely on the safeguards UK data protection law allows for international transfers, as set out in their own terms.

Why I’m allowed to use it (lawful basis)

• Analytics: your consent (UK GDPR Article 6(1)(a)), and consent under the PECR for the visit ID stored in your browser. You can withdraw it at any time in Cookie settings.
• Preferences (colour theme, sparkles): your consent.
• Hire me messages and the email copy: my legitimate interests (Article 6(1)(f)) in reading and replying to people who contact me. Where you’re asking about a job or a contract, also steps taken at your request before entering into a contract (Article 6(1)(b)).
• Remembering your cookie choice: this storage is strictly necessary, so I don’t ask you again on every page; it never leaves your browser.
• Hosting and security logs kept by my host: my legitimate interests in keeping the site working and secure.

Your rights

If UK GDPR applies to data I hold about you, you have the right to:

• ask for a copy of it (access)
• ask me to correct it (rectification)
• ask me to delete it (erasure)
• ask me to limit how I use it (restriction)
• get the data you gave me, or analytics collected with your consent, in a common machine-readable format (portability)

You also have the right to object to how I use your data, including to analytics, at any time.

Where I rely on your consent, you can withdraw it at any time from “Cookie settings” at the bottom of every page, or by emailing me. Withdrawing doesn’t affect anything done before you withdrew it.

To use any of these rights, or to ask a question about your data, email me at demi.21@outlook.com.

Complaints

If you’re unhappy with how I’ve handled your data, please email me first at demi.21@outlook.com. I’ll acknowledge your complaint within 30 days and tell you the outcome without undue delay.

You can also complain to the Information Commissioner’s Office (ICO):

• Online: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Children

This website is not directed at children under 13.

Related: Terms of Use.