This Privacy Policy explains how Nathan John, trading as NJTD ("I", "me" or "my"), collects and uses personal data through NJTD.xyz and its related pages, forms and project demonstrations (the Website).

1. Who is responsible for your data?

I am the controller responsible for personal data collected through the Website. For privacy questions or requests, contact me at nj@njtd.xyz.

2. What data do I collect?

Depending on how you use the Website, I may collect:

• your name, email address, subject and message when you contact me;
• your GitHub username and email address when you request access to a private repository;
• analytial information such as pages viewed, load times and timestamps, where this is provided by hosting, security or analytics services; and
• information you choose to include in a message or access request.

Please do not send special category data, passwords, payment details or other sensitive information through the Website.

3. How and why do I use your data?

I use personal data to:

• respond to enquiries and communicate with you;
• review and process requests for access to private GitHub repositories;
• send an access-request notification and, where appropriate, a reply to the email address supplied;
• operate, secure, troubleshoot and improve the Website; and
• comply with legal obligations and establish, exercise or defend legal claims.

4. Lawful bases

For contact enquiries, I process your data because it is necessary to take steps at your request before providing a response, and because I have a legitimate interest in managing communications. For repository-access requests, processing is necessary to take steps at your request and to administer access. I rely on legitimate interests for Website security, service reliability and limited audience measurement where permitted by law. I rely on consent where consent is legally required, including for non-essential cookies or similar technologies.

5. Who receives your data?

I may share the data needed for a particular purpose with service providers that operate the Website or help me communicate with you, including:

• email and hosting providers used to deliver and store messages;
• GitHub, when you request access to a private repository; and
• Vercel or other analytics and hosting providers, where their services are enabled and used.

These providers may process data on my behalf or as independent controllers under their own privacy notices. I do not sell your personal data. I may disclose information where required by law or to protect the Website, my rights or the safety of others.

6. International transfers

Some service providers may process personal data outside the UK, including in countries that may not provide the same level of legal protection. Where required, I will use a lawful transfer mechanism, such as UK adequacy regulations, an applicable adequacy decision, or the UK International Data Transfer Agreement or Addendum, together with appropriate safeguards.

7. How long do I keep your data?

I keep enquiry and access-request information only for as long as reasonably necessary to respond, administer the request, maintain appropriate business records and resolve disputes. I normally aim to delete routine correspondence within 12 months after the last relevant contact, unless a longer period is required by law or reasonably necessary for legal claims, security or record-keeping. Technical and analytics data is retained according to the relevant provider's settings and retention policies.

8. Your rights

Subject to legal conditions and exemptions, you may have the right to:

• request access to your personal data;
• request correction or deletion;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive data you provided in a portable format where applicable; and
• withdraw consent at any time where processing relies on consent.

To exercise a right, email nj@njtd.xyz. I may need to verify your identity. I will normally respond within one month, although the law allows an extension for complex or multiple requests.

9. Cookies and similar technologies

The Website does not create or store cookies. It may use technologies that are necessary for security, functionality and performance. It may also load Vercel analytics and speed-insights services. I will seek consent before using non-essential cookies or similar technologies where required by the Privacy and Electronic Communications Regulations 2003 (PECR). You can view and manage any cookies that may be automatically stored through your browser settings.

10. Security

I use reasonable technical and organisational measures to protect personal data. No internet transmission or storage system is completely secure, so I cannot guarantee absolute security. Please do not send confidential information that is not needed for your enquiry.

11. Complaints

If you are unhappy with how I use your data, please contact me first at nj@njtd.xyz so I can try to resolve the issue. You also have the right to complain to the UK Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint.

12. Changes to this policy

I may update this policy when the Website, services or applicable law changes. The latest version will be published on this page with a revised last-updated date.

Questions about this policy can be sent to nj@njtd.xyz.