Privacy Policy
What this website collects, why, and how it's handled.
Last updated: 2026-08-25
Who this policy covers
This website (neilcatton.com) is operated by Neil Catton. For any question about this policy or the data described below, contact nc@neilcatton.com.
What data is collected
Contact form. When you submit the form on the Contact page or the shorter form on the homepage, the name, email address, and message you enter are sent to a function running on this site's own hosting (Netlify) and delivered as an email to Neil's Microsoft 365 mailbox via the Microsoft Graph API. No separate third-party form-processing service sees this data — it passes only through the infrastructure already used to run and host this site. This data is used only to respond to your enquiry.
Analytics. This site uses Plausible Analytics and Netlify Web Analytics to understand how visitors use the site — which pages are viewed, where visitors come from, and general usage patterns. Both are cookie-free: Plausible aggregates visits without setting a cookie or storing any data that identifies you individually, and Netlify Web Analytics works from server request logs rather than a script running in your browser. This site does not use Google Analytics.
Newsletter embed. The homepage embeds a Substack subscription form. If you interact with it, Substack (a third party) handles that data directly under its own privacy policy.
Booking. The "Book a call" link takes you to Microsoft Bookings, a scheduling service run by Microsoft as part of Microsoft 365. Microsoft may set its own cookies or session data once you're on its site; this site has no access to that data, and Microsoft's own privacy policy governs it.
Fonts. The two typefaces used here are served from this site, not from Google Fonts. Your browser makes no request to Google when you load a page. This was changed in August 2026; before that, loading a page meant your IP address was visible to Google as part of the font request.
Cookies
This site does not set any analytics cookies — Plausible and Netlify Web Analytics are both cookie-free by design, so no cookie banner or consent prompt is needed for them. The contact form no longer involves a third party at all, so it sets no cookies either. The only cookies or session data set on this site come from Microsoft, once you leave this site to book a call via Microsoft Bookings. You can block or delete cookies through your browser settings at any time; doing so won't affect your ability to use the site.
Legal basis and your rights
Where UK GDPR applies, data from the contact form is processed on the basis of legitimate interest (responding to your enquiry) or, where applicable, consent. Analytics data is processed on the basis of legitimate interest in understanding and improving the site.
You have the right to:
- Ask what personal data is held about you and request a copy of it
- Ask for inaccurate data to be corrected
- Ask for your data to be deleted
- Object to how your data is used
- Withdraw consent at any time, where consent is the basis for processing
To exercise any of these rights, email nc@neilcatton.com.
Third parties this site relies on
- Netlify — website hosting, Web Analytics, and the contact form's server-side function
- Plausible Analytics — cookie-free usage analytics
- Substack — newsletter subscription and publishing
- Microsoft 365 — contact form delivery, via Neil's own mailbox
- Microsoft Bookings — call booking, linked from the site's "Book a call" button
Some of these providers are based outside the UK/EEA, including in the United States. Where that's the case, they are relied upon to provide appropriate safeguards for international data transfers under their own compliance frameworks.
Data retention
Contact form submissions are kept only as long as needed to handle the enquiry and any follow-up. Analytics data is retained according to each provider's own default retention settings.
Changes to this policy
This policy may be updated from time to time to reflect changes to the site or the services it uses. The date at the top of this page shows when it was last revised.