Privacy

Who is responsible

Marc Paul operates marcpaul.tech and is responsible for the personal information described here. Email info@marcpaul.tech with a privacy question or data request.

Contact enquiries

The contact form asks for your name, email address and message. If you arrive from the Owner Work Audit, you can also attach its summary. The attachment is visible above the form and can be removed before you send anything.

Marc uses these details to read your enquiry, decide whether the work fits this practice and reply. The legal basis is taking steps at your request before a possible contract and, where needed, the legitimate interest in handling genuine business enquiries.

Leave out passwords, credentials, confidential client records, health information, financial account details, source code and sensitive documents.

Owner Work Audit

The audit calculates its result in your browser. Its answers are not sent to Marc while you complete it.

If you choose “Attach result and contact Marc”, a summary is stored in session storage for up to six hours. It stays with the current browser tab and is placed beside the short contact form. You can remove it there. Marc receives the summary only when you send the contact form.

Google Forms and Google Sheets

The website validates an enquiry on its own server route and relays accepted submissions to Google Forms. Responses are stored in a Google Sheet controlled by Marc. The website does not keep a second application database of the form contents.

The server adds a random submission identifier, time and source so duplicate or suspicious requests can be handled. A successful message confirms that Google accepted the request. It does not promise that a later email or other follow-up automation completed.

Google processes the submitted information to provide Forms and Sheets. Its systems may process data outside the European Economic Area under the transfer safeguards described in Google’s applicable service terms and data-processing terms.

Google Analytics

Google Analytics is optional. The Google tag is not loaded until you choose “Allow analytics”. If you choose “No analytics”, no Analytics tag is loaded. Your choice is saved in local storage and can be reopened through “Analytics choice” in the footer. Withdrawing permission stops collection and removes Google Analytics cookies that this site can access.

When allowed, Analytics records pages viewed and a small set of site events: starting or completing the Owner Work Audit, attaching or removing an audit result, using a main action, following an external link, starting the contact form, an enquiry accepted by the form relay and a form error. Event data describes the interaction, not the words you typed. Names, email addresses, messages and audit text are not sent to Analytics.

Advertising storage, personalised advertising and Google Signals are disabled in the site configuration. Google may still receive technical information needed to provide Analytics, such as an online identifier, browser and device information, approximate location derived from an IP address and the page address. Google explains its role and safeguards in its privacy policy.

The Analytics property should use the shortest practical event-data retention setting when activated. Aggregated reports may remain after event-level data expires.

Bot protection and hosting records

The contact route checks request origin, timing, content type, field limits and a hidden field used to catch simple bots. It rejects malformed or implausibly fast submissions. No challenge or behavioural profiling is used.

Hosting and security providers process technical request records needed to deliver and protect the site. These can include an IP address, request time, requested page, browser information and security signals. They are not combined with form answers for advertising.

Retention

An audit that is never submitted is not received by Marc. Its temporary attachment expires from session storage after six hours.

An enquiry that does not become an engagement is deleted or anonymised within 12 months of the last substantive exchange, unless the law requires a longer period or you ask for deletion sooner.

If an engagement begins, necessary information becomes part of the client record. Duplicate Form or Sheet intake records are removed within 90 days. Contract, accounting, tax and legal records then follow their required schedules.

Sharing

Information is shared with providers needed for hosting, security, forms, email, storage and client service, or where disclosure is required by law. Submitted information is not sold and is not used to create advertising profiles.

Your rights

Depending on the law that applies, you may ask for access, correction, deletion, restriction or a portable copy, or object to certain uses. You can withdraw analytics permission at any time through the footer.

Email info@marcpaul.tech to make a request. Some records may have to be kept where the law requires it. You can also complain to the data-protection authority where you live or work. In Malta, this is the Information and Data Protection Commissioner.

Changes

This notice may change when the website, providers or services change. The date at the top shows the current version.