How I handle your data.
This is a simple portfolio site with a contact form and a booking calendar. Here's exactly what happens with your information.
Last updated: April 2026
Who I am
This website is operated by Matt House, trading as Exeos Ltd. For any privacy-related queries, email email me.
What I collect
Contact form
Your name, email address, and message. Used solely to respond to your enquiry.
Cal.com bookings
Your name and email when you book a call. Processed by Cal.com under their privacy policy.
Analytics
Cloudflare Web Analytics and Umami — both privacy-friendly, no cookies, no personal data collected. Aggregate page views and anonymous usage data only.
Lawful basis for processing
I process your data under legitimate interest (Article 6(1)(f) UK GDPR). When you submit the contact form or book a call, you're reaching out to discuss a project — processing your details to reply is a reasonable expectation on both sides.
I do not process data for marketing, profiling, or any automated decision-making.
Third-party processors
Your data is handled by the following services, each operating under their own privacy policies and data processing agreements:
These services may process data outside the UK. Each maintains appropriate safeguards (such as standard contractual clauses) for international transfers.
Data retention
Contact form submissions are retained for up to 12 months after our last communication, then deleted. You can request earlier deletion at any time by emailing email me.
Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of the data I hold about you
- Rectification — correct any inaccurate data
- Erasure — request deletion of your data
- Restriction — limit how I process your data
- Portability — receive your data in a portable format
- Objection — object to processing based on legitimate interest
To exercise any of these, email email me. If you're unsatisfied with my response, you can lodge a complaint with the Information Commissioner's Office (ICO).
Changes to this policy
I may update this policy when my data practices change. The date at the top of this page will be updated accordingly.