Privacy Policy
What this website collects, why, and what your rights are. Written to be read, not to be got past.
Who is responsible
Brian Samson is the data controller for this website.
- Website: briansamsonhealth.com
- Contact: briansamson@proton.me
- Based in Dublin, Ireland.
The short version
This site sets no cookies, runs no analytics, and uses no advertising or tracking of any kind. There is no consent banner because there is nothing to consent to. The only personal data collected is what you deliberately send: the contact form, and the newsletter if you subscribe.
The contact form
If you use the contact form, you submit your name, your email address, your organisation if you choose to give it, and whatever you write in the message.
This is used solely to read and reply to your message. It is not added to any mailing list, and it is not used for marketing.
Lawful basis: legitimate interests, namely replying to someone who has deliberately chosen to contact me.
Form submissions are handled by Netlify, which hosts this site.
The newsletter
The subscribe buttons on this site link to an external signup page hosted by MailerLite, my email provider. No newsletter signup happens on this website, and this site never sees your email address. Subscribing is handled entirely by MailerLite, and their privacy policy applies to that page.
If you do subscribe, I hold your email address in order to send you The Wellbeing Brief.
Lawful basis: consent. You can withdraw it at any time using the unsubscribe link in any issue, which takes effect immediately and permanently.
Server logs
Netlify, as host, keeps standard technical logs when a page is requested, including IP addresses. These exist for security and to keep the site running. I do not use them to identify or profile visitors.
Who else sees your data
Two processors, and nobody else:
- Netlify hosts the site and receives contact form submissions.
- MailerLite hosts the newsletter signup page and delivers the newsletter.
Your data is not sold, rented, shared with advertisers, or used to train anything.
Both providers may process or store data outside the European Economic Area, including in the United States. Where that happens it is covered by the transfer safeguards those providers have in place, such as Standard Contractual Clauses or the EU-US Data Privacy Framework.
How long it is kept
- Messages: kept while the conversation is live and for a reasonable period after. Deleted on request.
- Newsletter: kept until you unsubscribe or ask to be removed.
Your rights
Under the GDPR you have the right to:
- ask what personal data I hold about you, and get a copy
- have inaccurate data corrected
- have your data erased
- restrict or object to how it is used
- receive your data in a portable format
- withdraw consent at any time, where consent is the basis
Email briansamson@proton.me and I will action it. There is no charge and no form to fill in.
If you are unhappy with how I have handled your data, you can complain to the Irish Data Protection Commission at dataprotection.ie.
Children
This site is aimed at organisations and working adults. It is not directed at children and does not knowingly collect their data.
Changes
If this policy changes, the date at the top changes with it.
See also the Terms of Use.