Privacy Policy

This policy explains what personal information this website collects, why, and what your rights are. Last updated 23 October 2026.

Who is responsible for your data

Michael Fas, trading as Open Smart, Cambridge, England, UK, is the controller of the personal data described here. You can contact me about it at michael@michaelfas.com or on +44 (0) 7706 601114.

What this website collects

Contact form. If you use the contact form, I collect your name, email address, optional phone number, the topic you choose and your message. It is saved in this website’s database and emailed to me. The site does not store your IP address with form entries.

CV downloads and prints. When the CV is downloaded or printed from the CV page, the site records the date and time, the type of device (desktop, mobile or tablet) and the page you came from. It does not record your IP address, name or email, and this information does not identify you.

Email and phone. If you email or phone me, I keep the correspondence and any notes needed to help you.

Server logs. The hosting provider keeps standard server logs (such as IP address, browser and pages requested) for security and to keep the service running.

Cookies and tracking

This website does not set cookies for visitors and does not use advertising or social media tracking. It uses a privacy-friendly analytics plugin (Independent Analytics) that is hosted on this website. It counts page views and records anonymous information such as the page visited, the site that referred you, your country, browser and device type. It does not use cookies, does not identify you and does not send information to outside services, so no cookie banner is needed. Fonts and images are hosted on the site itself. Some pages link to other websites (for example LinkedIn, Open Smart and photo credits on Wikimedia Commons), which have their own privacy policies.

Why I use your information, and the legal basis

  • To reply to your enquiry or message: to take steps you ask for before a contract, and my legitimate interest in answering people who contact me. The consent box on the form also records that you agree to me using your details to reply.
  • To run and protect the website: my legitimate interest in keeping the site secure and working.
  • To understand how the website is used and how often the CV is downloaded: my legitimate interest in improving the site, using anonymous counts only.
  • To meet legal obligations: for example record keeping, where the law requires it.

I do not sell your information, and I do not use it for automated decision-making.

Who I share it with

I only share information with the service providers needed to run the website and handle email:

  • My web hosting and email provider (20i), which hosts the website and handles its email.
  • Google (Gmail), where enquiry emails are received.

These providers act on my instructions. If I use another provider to help with your enquiry, I will tell you first. I may also disclose information where the law requires it.

How long I keep it

  • Contact form messages and emails: for as long as needed to deal with your enquiry and any follow-up, then reviewed and deleted when no longer needed, normally within 24 months.
  • CV download counts and website visit statistics: kept as anonymous statistics, as they contain no personal data.
  • Server logs: kept by the hosting provider for its standard retention period.

Your rights

Under UK data protection law you have the right to ask for a copy of your personal data, to have it corrected or deleted, to restrict or object to how it is used, and to ask for it in a portable format. To use any of these rights, contact me using the details above. I will reply within one month.

If you are unhappy with how your information has been handled, you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113. I would appreciate the chance to put things right first.

Security

The website uses HTTPS, access to the site’s admin area is restricted, and messages are only sent to me. No system is completely secure, so please do not send sensitive personal information through the contact form.

Changes to this policy

I may update this policy from time to time. The date at the top shows when it was last changed.