Privacy Policy
Last updated: December 2024
Who I Am
This website, michxymi.com, is operated by Michael Xymitoulias as a personal portfolio and blog.
For any privacy-related questions, you can contact me through the contact form on this website or via the social links provided.
What Data I Collect
I collect minimal personal data to operate this website:
Contact Form Submissions
- Name
- Email address
- Message content
Analytics Data (Anonymous)
- Page views and navigation patterns
- Device type and browser information
- Geographic region (country-level)
- Referrer information
This analytics data is collected anonymously and cannot be used to identify you personally.
How I Collect Your Data
Directly from you:
- When you submit the contact form
Automatically:
- Through Vercel Analytics and Speed Insights when you browse the website
How I Use Your Data
| Data | Purpose | Lawful Basis |
|---|---|---|
| Contact form data | To respond to your enquiries | Legitimate interest / Consent |
| Analytics data | To understand how visitors use the site and improve it | Legitimate interest |
I do not use your data for marketing purposes, and I will never sell your personal data.
Data Sharing
Your data may be processed by the following third-party services:
Formspree (contact form processor)
- Processes contact form submissions
- Privacy Policy: formspree.io/legal/privacy-policy
Vercel (hosting and analytics)
- Hosts this website and provides analytics
- Privacy-focused, cookie-less analytics
- Privacy Policy: vercel.com/legal/privacy-policy
I do not share your personal data with any other third parties.
Cookies
This website does not use cookies. Vercel Analytics is designed to be privacy-friendly and operates without cookies or tracking scripts that follow you across the web.
Data Retention
- Contact form submissions: Retained by Formspree according to their data retention policy. I may keep correspondence records for as long as necessary to address your enquiry.
- Analytics data: Aggregated and anonymised, retained by Vercel according to their policies.
Your Rights
Under UK GDPR, you have the following rights:
- Right of access - Request a copy of your personal data
- Right to rectification - Request correction of inaccurate data
- Right to erasure - Request deletion of your data (“right to be forgotten”)
- Right to restrict processing - Request limitation of how your data is used
- Right to data portability - Request your data in a portable format
- Right to object - Object to processing based on legitimate interests
- Right to withdraw consent - Where processing is based on consent
To exercise any of these rights, please contact me through the contact form or social links on this website.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated: ico.org.uk/make-a-complaint
Changes to This Policy
I may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.
Contact
If you have any questions about this privacy policy or how your data is handled, please contact me through the contact form on this website.