Privacy Policy

This notice explains what happens to information when you visit borisedisoncraft.com. I have kept it plain and specific rather than padding it out with legal filler, because the site itself is simple. It is my personal portfolio. There is no shop, no login, and no account for you to create.

Who runs this site

This website is maintained by Boris Edison as a personal portfolio. Where this notice says "I", "me" or "my", that is who it refers to. If you need to reach me about anything below, the Contact section of the homepage has the current details.

What the site actually collects

Most of the time you can read every page here without handing over a single personal detail. There are two exceptions to that.

1. When you get in touch

If you use the contact form, or write to the email address shown on the site, I receive whatever you choose to put in that message. Usually that is a name, an email address and the text itself. I only ever get this because you decided to send it.

2. Technical information that arrives on its own

Like almost every website, mine sits behind a hosting and content-delivery layer (Cloudflare). When your browser requests a page, that layer briefly sees things such as your IP address, the type of browser and device you are using, the page you asked for and the rough time of the request. This is ordinary server-log information, and it exists to keep the site online, quick and protected from abuse.

Analytics, and the cookie question

The tracking here is deliberately light. The visitor statistics I look at come from Cloudflare's privacy-focused analytics, which counts page views and traffic patterns without setting advertising cookies and without stitching together a profile of you across other websites. In plain terms, I can see that a page was popular. I cannot see that it was you. The site does not run third-party advertising trackers, and if that ever changes this notice will change with it, and you will be asked for consent wherever the law requires it.

How the information is used

• to reply to you when you make contact
• to keep the website running, secure and reasonably fast
• to understand, only in aggregate, which projects and pages people find useful
• to meet any legal obligation that genuinely applies to me

I do not sell your information. I have no interest in doing so, and nothing here is set up to make it possible.

The legal basis (UK, EU and similar regimes)

Where the GDPR or UK GDPR applies, I rely on my legitimate interest in running and protecting a personal website, and on your consent when you voluntarily contact me. Where a law obliges me to keep certain records, the basis is legal obligation.

Who else is involved

Running a website means a small number of trusted services touch the traffic:

• Hosting, security and content delivery is handled by Cloudflare, which serves the pages and filters malicious traffic.
• Several pages link outwards to platforms such as GitHub, LinkedIn, Instagram and pandevs.org. Once you click through, you are on someone else's platform, and their privacy policy takes over rather than this one.

Beyond that, I do not pass contact-form messages to anyone unless I am legally compelled to.

How long things are kept

Server and analytics data is short-lived and rolls off on the provider's normal schedule. Messages you send me are kept only for as long as the conversation, or a sensible follow-up to it, remains useful, and are deleted once they no longer serve a purpose. If you would like a message you sent removed sooner, just ask.

Your rights, wherever you live

Data-protection law is not identical everywhere, but the core rights look similar across the GDPR and UK GDPR (Europe and the UK), the CCPA and CPRA (California), PIPEDA (Canada), the LGPD (Brazil), the Privacy Act (Australia) and the DPDP Act (India). Depending on where you are, you can generally ask me to:

• tell you what information of yours I hold
• correct anything that is inaccurate
• delete it
• stop or limit a particular use of it
• provide a copy in a portable format
• object to a use you are not comfortable with

You will never be treated worse for exercising any of these. To make a request, contact me through the site, and I will respond within the timeframe your local law sets, and within a reasonable period in any case.

Sending data across borders

The internet does not respect national boundaries, and neither do content-delivery networks. Your request may be served from, or pass through, servers outside your own country. Where personal data moves between regions, it is handled under the safeguards those providers commit to, such as standard contractual clauses.

Children

This is a professional portfolio, and it is not aimed at children. I do not knowingly collect information from anyone under the age at which local law treats them as a child. If you believe a child has sent me something, let me know and I will remove it.

Keeping it safe, honestly

I take sensible steps to protect the little information that passes through here, and the hosting layer adds its own protection on top. That said, no website or transmission over the internet is ever completely secure, and it would be dishonest to promise otherwise.

Updates to this notice

If the site gains a new feature, or the law shifts, I will update this page and change the date at the top. Meaningful changes will be made obvious rather than buried.

Getting in touch

Questions, corrections and requests about your information are all welcome. Use the Contact section on the homepage and mark your message for my attention regarding privacy.

See also the Terms and Conditions that govern use of this site.