Privacy & cookies

Last updated: 18 October 2026

Who we are

This site is operated by Paul Meersman, trading as Paul Indigo. Paul Meersman is the data controller for personal data processed through this site. You can get in touch using the contact form on this site.

What we collect and why

Contact form

When you send a message through the contact form, your name, email address, and the content of your message are collected. This information is used solely to reply to you.

Lawful basis: Legitimate interests — responding to your enquiry is the purpose for which you provided the information.

How long it is kept: Enquiry emails are kept for as long as the correspondence is reasonably relevant, typically no more than two years. Form submissions are not stored in a database — messages go directly to an email inbox.

Hosting and security

This site is hosted on Cloudflare's network. Cloudflare may process technical data — including IP addresses, browser type, and request metadata — to deliver the site securely and to protect it from abuse (for example, blocking traffic from known malicious sources). This is standard infrastructure logging, not tracking.

Lawful basis: Legitimate interests — running a website securely requires this data to be processed at the network level.

Cloudflare's privacy policy is at cloudflare.com/privacypolicy.

Email delivery

Messages submitted through the contact form are sent to a Gmail inbox. Google processes the email in transit and stores it in that inbox. Google's privacy policy applies to this processing. You can find it at policies.google.com/privacy.

International transfers: Cloudflare and Google both operate globally. By using this site, your data may be processed on servers outside the UK. Both companies offer adequate safeguards under UK data protection law (Standard Contractual Clauses or equivalent frameworks).

Who data is shared with

Data is shared only with the service providers described above (Cloudflare for hosting, Google for email). Personal data is not sold or shared with third parties for marketing.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data held about you
• Ask for inaccurate data to be corrected
• Ask for your data to be erased (where there is no overriding legitimate reason to keep it)
• Object to processing based on legitimate interests
• Request restriction of processing

To exercise any of these rights, use the contact form on this site. You will receive a response within one month.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you think your data has not been handled correctly.

Cookies and device storage

This site does not set any cookies. It does not use localStorage, sessionStorage, or any other form of device storage.

There are no analytics scripts, tracking pixels, social media embeds, or third-party scripts of any kind. The only external service this site communicates with is Cloudflare, which operates the network it runs on.

Because nothing non-essential is stored on your device, no consent banner is shown.