Privacy Policy

Who I Am

This website, michxymi.com, is operated by Michael Xymitoulias as a personal portfolio and blog.

For any privacy-related questions, you can contact me through the contact form on this website or via the social links provided.

What Data I Collect

I collect minimal personal data to operate this website:

Contact form submissions

• Name
• Email address
• Message content

Analytics data (privacy-focused)

• Page views and navigation patterns
• Device type and browser information
• Geographic region (country-level)
• Referrer information

This analytics data is collected using Cloudflare Web Analytics, which is designed to provide aggregated usage metrics without using cookies, localStorage, or visitor fingerprinting.

How I Collect Your Data

Directly from you:

• When you submit the contact form

Automatically:

• Through Cloudflare Web Analytics and Cloudflare’s hosting infrastructure when you browse the website

How I Use Your Data

Data	Purpose	Lawful Basis
Contact form data	To respond to your enquiries	Legitimate interest / Consent
Analytics data	To understand how visitors use the site and improve it	Legitimate interest

I do not use your data for marketing purposes, and I will never sell your personal data.

Data Sharing

Your data may be processed by the following third-party services:

Formspree (contact form processor)

• Processes contact form submissions
• Privacy Policy: formspree.io/legal/privacy-policy

Cloudflare (hosting, performance, security, and analytics)

• Hosts this website on Cloudflare Workers and provides Cloudflare Web Analytics
• Provides privacy-focused analytics without cookies, localStorage, or visitor fingerprinting
• Privacy Policy: cloudflare.com/privacypolicy

I do not share your personal data with any other third parties.

Cookies

This website does not use cookies. Cloudflare Web Analytics does not use cookies or localStorage to collect usage metrics, and it does not fingerprint visitors for analytics purposes.

Data Retention

• Contact form submissions: Retained by Formspree according to their data retention policy. I may keep correspondence records for as long as necessary to address your enquiry.
• Analytics data: Aggregated analytics data is retained by Cloudflare according to their policies.

Your Rights

Under UK GDPR, you have the following rights:

• Right of access - Request a copy of your personal data
• Right to rectification - Request correction of inaccurate data
• Right to erasure - Request deletion of your data (“right to be forgotten”)
• Right to restrict processing - Request limitation of how your data is used
• Right to data portability - Request your data in a portable format
• Right to object - Object to processing based on legitimate interests
• Right to withdraw consent - Where processing is based on consent

To exercise any of these rights, please contact me through the contact form or social links on this website.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated: ico.org.uk/make-a-complaint.

Changes to This Policy

I may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

Contact

If you have any questions about this privacy policy or how your data is handled, please contact me through the contact form on this website.