The necessary paperwork
Privacy
Last updated: 22 September 2026
The short version: this site collects only what it needs to answer enquiries, understand broad site use, and stay secure. I do not sell personal data or use it for automated decision-making.
Who is responsible for your data?
Dev Parmar is the data controller for personal information handled through this website. The site is a personal portfolio operated from Oxfordshire, United Kingdom.
You can ask a privacy question, make a rights request, or contact me about your information using the contact form or by emailing rathernormalemail@gmail.com.
What I collect and why
When you use the contact form
I receive the name, email address, and message you submit. I use this information to read and respond to your enquiry, discuss possible work, and keep a reasonable record of that conversation. The lawful basis is legitimate interests: responding to people who choose to contact me and managing related project conversations.
The form is provided by WPForms and messages are delivered through my configured email service. Please do not include sensitive personal information that is not needed for your enquiry.
Analytics
If you accept analytics cookies, Google Analytics may collect information such as the pages viewed, approximate location, device and browser details, referral source, and the time spent on the site. I use aggregated reports to understand which work people find useful and to improve the site. The lawful basis is consent, which you can withdraw at any time through the cookie controls.
Security and server logs
The web server, Cloudflare, and Wordfence may process technical information including IP addresses, requested URLs, browser details, and timestamps. This helps prevent abuse, investigate faults, and protect the website. The lawful basis is legitimate interests in keeping the site reliable and secure.
Audio and external links
Voice samples are served from this website. Playing one causes your browser to request the audio file, which may be recorded in ordinary server logs. Links to services such as Etsy take you to a separate website; that service applies its own privacy and cookie terms after you leave this site.
Who processes the information?
Information may be handled by the following service categories where necessary:
- Hosting and security: the site is self-hosted, with Cloudflare providing DNS and network protection.
- Email: contact-form messages are delivered to my email account.
- Analytics: Google Analytics, only after consent.
- Website software: WordPress, WPForms, Wordfence, and Complianz support the form, security, and consent features.
I do not sell or rent personal information.
International transfers
Some providers, including Google and Cloudflare, may process information outside the United Kingdom. Where that happens, the provider is responsible for using an applicable UK adequacy regulation or recognised safeguards such as the UK International Data Transfer Agreement or an approved addendum to standard contractual clauses.
How long information is kept
- Enquiries and related correspondence: normally up to 24 months after the last meaningful contact, unless a longer period is needed for an active project, legal obligation, or dispute.
- Analytics: according to the retention period configured in Google Analytics, currently up to 14 months.
- Security and server logs: for the shortest practical period needed for security, troubleshooting, and abuse prevention; longer only where an incident requires investigation.
Your rights
Depending on the circumstances, UK data-protection law gives you rights to access, correct, or erase your personal data; restrict or object to processing; receive portable data; and withdraw consent where consent is the lawful basis. These rights are not absolute, and the applicable right depends on why the information is being used.
To exercise a right, use the contact details above. I may need enough information to confirm your identity and understand the request.
Complaints
Please contact me first so I can try to resolve the issue. You can also complain to the UK Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113.
Children
This portfolio is not directed at children, and I do not knowingly collect personal information from children through it.
Changes to this notice
I review this notice when the site, its services, or the law changes. The date at the top shows when it was last updated.