Privacy Notice

Data Protection Matters is a privacy consultancy founded by Gilad Yaron. We help organizations manage data protection, so we hold ourselves to the same standard we ask of our clients. This notice explains, in plain language, what personal data we collect through this website, why we collect it, who else handles it, and what choices you have.

If you have a question about anything here, write to us at gilad@giladyaron.com.

What this notice covers

This notice applies to this website and to enquiries you make through it, including the contact form, our newsletter and the cookies and similar technologies the site uses.

It does not cover the personal data we handle when we work for a client. Client engagements are governed by their own agreement and data processing terms, and in those cases we act on the client's instructions.

What we collect

When you contact us

If you use the contact form, we receive your name, your email address, the message you write and, if you choose to give it, your phone number. Please do not include sensitive information in your message that we do not need in order to reply.

When you subscribe to the newsletter

We collect your email address.

Automatically, when you browse

This site is deliberately light on tracking. It sets only essential cookies, and we do not run third-party advertising or analytics trackers on it today. Our hosting provider processes basic technical information, such as your IP address and request logs, to serve the site and keep it secure. If we introduce analytics in future, we will update this notice and ask for your consent first (see Cookies below).

How we use it and our legal basis

• To reply to your enquiry and provide the information you ask for. Our legal basis is our legitimate interest in responding to people who contact us, and, where you are asking about our services, taking steps at your request before entering into a contract.
• To send you the newsletter. Our legal basis is your consent. You can withdraw it at any time using the unsubscribe link in any message, or by emailing us.
• To keep the site running and secure. Our legal basis is our legitimate interest in operating a safe, working website, supported by essential cookies and our hosting provider's logs.

We do not sell your personal data, and we do not use it to make decisions about you by automated means.

The contact form and third parties

Our contact form is processed by FormSubmit, an external form-to-email service. When you submit the form, FormSubmit receives what you entered and transmits it to us by email. Because your message passes through their systems, it is also subject to their own terms and privacy practices.

Our newsletter and hosting providers also process limited data on our behalf, for example your email address, or the technical information needed to serve the site. We choose providers carefully, share only what each one needs, and expect all of them to protect the data and use it only for the purposes we have set.

Some of these providers (including FormSubmit) may be located outside your country or outside the European Economic Area. Where that is the case, we rely on appropriate safeguards for the transfer, such as an adequacy decision or standard contractual clauses. You can ask us for details using the contact address below.

Beyond these providers, we share personal data only where the law requires it or where you ask us to.

How long we keep it

• Enquiries: we keep your message and details only as long as needed to respond and for a reasonable follow-up period afterwards. If the enquiry leads to an engagement, we keep what is needed under the terms of that engagement.
• Newsletter: we keep your email address until you unsubscribe.
• Technical logs: our hosting provider's logs are kept for a short period for security and troubleshooting, then discarded.

Your rights

Depending on where you live, you have the right to:

• ask for access to the personal data we hold about you;
• ask us to correct data that is inaccurate or incomplete;
• ask us to erase your data;
• ask us to restrict how we use your data;
• object to our use of your data, including where we rely on legitimate interest;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting the lawfulness of what we did before; and
• complain to your local data protection supervisory authority.

To exercise any of these rights, email us at gilad@giladyaron.com. We may need to confirm your identity first, and we will respond within the time the law allows. We would also welcome the chance to put things right before you go to a regulator, but you are always free to do so.

Cookies

Cookies are small files that a website places on your device. Today this site uses only essential cookies, the ones needed to keep it working and secure, for example supporting the mobile menu. Essential cookies do not need your consent.

We do not currently use analytics, advertising or other tracking cookies. If that changes, we will ask for your consent first and set out the details here before any such cookies are used. You can always block or delete cookies through your browser settings; blocking essential cookies may stop parts of the site from working.

Security

We use reasonable technical and organizational measures to protect personal data against loss, misuse and unauthorized access. These include access controls, encrypted connections to this site and limiting who can see enquiries to the people who need to. No online service can be guaranteed to be completely secure, so please keep that in mind when deciding what to send us.

Changes to this notice

We may update this notice from time to time, for example when our services or the law change. The "Last updated" date at the top shows the latest version. If we make a significant change, we will make it clear on this site.

Contact us

For any question about this notice or about how we handle personal data, email gilad@giladyaron.com or use our contact page.

This notice is provided for transparency and does not constitute legal advice.