Privacy and storage
Your data, kept straightforward
This notice explains what the portfolio collects, why it is needed and the choices you have. There is no behavioural tracking hidden behind the page.
Privacy notice · Last updated 22 September 2026
Who is responsible
Phil Forster is the data controller for personal information collected through this website. For privacy questions or requests, email phil@philforster.co.uk.
Information I collect
Contact enquiries
If you use the contact form, I receive your name, email address, any optional phone number, and the information you include in your message.
Security information
The form creates a temporary security session to prevent forged submissions. A one-way hash derived from your IP address and submission times is also used to limit automated or excessive requests. Website and email providers may process standard technical logs such as IP address, browser details, request time and requested page for security and service delivery.
Why I use it
I use enquiry details to read, respond to and manage your message. The lawful basis is my legitimate interest in responding to professional enquiries. Where your message concerns potential work or services, processing may also be necessary to take steps at your request before entering into a contract.
Security information is used to protect the form and website from misuse. The lawful basis is my legitimate interest in maintaining a secure and reliable service.
How long I keep it
Enquiry emails are normally kept for up to 12 months after the last contact. They may be kept longer where an ongoing professional relationship, contractual record or legal obligation requires it. Rate-limit records operate over a rolling 15-minute window and are removed through periodic cleanup. The security session ends when you close your browser.
Who receives it
Contact messages pass through the providers that host this website and email service. They process information only to provide those services and maintain their security. I do not sell personal information or use contact details for mailing lists or automated marketing.
If a provider processes information outside the UK, the transfer must be covered by an appropriate safeguard recognised by UK data protection law.
Storage on your device
This site does not use advertising or analytics cookies. It uses the following necessary or preference storage:
- A session cookie supports contact-form security and expires when the browser closes.
- Local browser storage remembers display choices you make, including theme, colour spectrum, motion, density and archive view. These preferences remain until you change them or clear your browser data.
These technologies are used only to provide security or remember an appearance choice you requested, so the site does not ask for cookie consent.
Your rights
Depending on the circumstances, you may ask for access to your personal information, correction, deletion, restriction of processing, or object to processing based on legitimate interests. Email phil@philforster.co.uk to make a request.
You can also complain to the Information Commissioner’s Office, the UK data protection regulator.