Privacy Notice

Who is responsible for your data

The data controller is:

If you have any questions about this Privacy Notice or how your personal data is handled, you can contact me at the email address above.

Information I collect

When you submit the contact form, I may collect:

• your name;
• company name;
• email address;
• business sector, if you choose to provide it;
• the type of service or help you are interested in;
• the information you include in your enquiry.

Basic technical information associated with requests to the website may also be processed by the website infrastructure for security, reliability and abuse-prevention purposes.

Please avoid including sensitive personal information in the free-text enquiry unless it is genuinely necessary.

Why I use your information

Information submitted through the website is used to:

• respond to your enquiry;
• understand the business problem or project you would like to discuss;
• assess whether I may be able to help;
• arrange further discussions;
• prepare a proposal or take other steps you request before potentially entering into a business relationship;
• maintain the security and reliability of the website and prevent spam or abuse.

I do not use contact-form enquiries for unrelated marketing, and I do not sell your personal information.

Legal basis

Where you contact me about a potential project or service, the processing is generally necessary to take steps at your request before potentially entering into a contract.

Where personal data is processed for website security, abuse prevention or related operational purposes, I rely on my legitimate interests in operating and protecting the website, provided those interests are not overridden by your rights and interests.

Who receives your information

I use third-party service providers to operate the website and deliver enquiries.

These currently include:

• Cloudflare, for website hosting, networking and security;
• Resend, for delivery of contact-form emails;
• Google, because enquiries are ultimately received in a Gmail mailbox.

These providers may process relevant personal data only to the extent necessary for the services they provide, subject to their applicable terms, privacy commitments and data-protection safeguards.

I may also disclose information where required by law or where reasonably necessary to establish, exercise or defend legal claims.

International data transfers

Some of the service providers used by this website operate internationally and may process personal data outside the European Economic Area.

Where this occurs, the relevant provider may rely on recognised safeguards such as adequacy decisions, the EU-U.S. Data Privacy Framework or Standard Contractual Clauses, as applicable.

How long I keep enquiry information

If an enquiry does not result in an ongoing client relationship, I normally retain the related correspondence for up to 12 months after the last meaningful contact.

Information may be deleted earlier where it is no longer needed.

If an enquiry develops into a client relationship, relevant information may be retained for longer where necessary for the performance of the relationship, legal or accounting obligations, or the establishment, exercise or defence of legal claims.

Technical and security information may be retained for shorter or different periods depending on the systems involved and what is reasonably necessary for security and troubleshooting.

Your rights

Depending on the circumstances, you may have rights under data-protection law including the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing based on legitimate interests;
• receive certain data in a portable format where the legal requirements for portability apply.

You can exercise your rights by contacting:

hello@lukedamato.com

I may need to verify your identity before acting on a request.

Complaints

If you believe your personal data has been handled in breach of applicable data-protection law, you have the right to lodge a complaint with a supervisory authority.

In Malta, the supervisory authority is the Office of the Information and Data Protection Commissioner (IDPC).

You may also contact me first at hello@lukedamato.com so that I can try to address your concern directly.

Automated decision-making

Personal information submitted through this website is not used for automated decision-making or profiling that produces legal or similarly significant effects.

Cookies and analytics

This website currently does not use advertising trackers or analytics tools that track visitors for marketing purposes.

If the website's use of cookies, analytics or similar technologies changes in the future, this Privacy Notice and any required consent mechanism will be updated accordingly.

Changes to this notice

This Privacy Notice may be updated from time to time to reflect changes to the website, service providers or legal requirements.

The date shown at the top indicates when it was last updated.