Skip to content

Privacy Policy

Last updated: October 2026

1. Data Controller

Rob Hopkins ("I", "me" or "my") is the data controller for personal data collected through this website (robhopkins.dev).

2. Information I Collect

  • Contact form: your first name, last name (optional), email address, phone number (optional) and your message.
  • Updates: if you switch on "Send me occasional updates", your name and email address are added to my mailing list.
  • Analytics and advertising data: pages viewed, device and browser type, approximate location and which advert brought you here, only if you allow these cookies.
  • Cookies: see the cookie policy.

3. Why I Use It and the Legal Basis (GDPR Article 6)

  • To reply to your message: legitimate interest (Art. 6(1)(f)), or steps you ask for before entering a contract (Art. 6(1)(b)).
  • To send occasional updates: your consent (Art. 6(1)(a)). Every email has an unsubscribe link.
  • Analytics and advertising cookies: your consent (Art. 6(1)(a)), which you can change at any time on the cookie page.
  • Security and spam protection: legitimate interest (Art. 6(1)(f)).
  • Legal obligations: where the law requires it (Art. 6(1)(c)).

4. How Long I Keep It

  • Contact form messages: 3 years from our last contact, or until you ask me to delete them.
  • Mailing list: until you unsubscribe.
  • Analytics data: up to 14 months.
  • Cookie choices: 6 months, after which you are asked again.

5. Who Processes It for Me

I never sell your personal data.

6. International Transfers

Some of these providers are in the United States. Transfers outside the European Economic Area are protected by the EU-US Data Privacy Framework or by the European Commission's Standard Contractual Clauses. You can ask for a copy of these safeguards.

7. Your Rights Under GDPR

  • Access a copy of your personal data (Art. 15)
  • Correct inaccurate data (Art. 16)
  • Have your data deleted (Art. 17)
  • Restrict how it is used (Art. 18)
  • Receive it in a portable format (Art. 20)
  • Object to processing based on legitimate interest (Art. 21)
  • Withdraw consent at any time (Art. 7)

To use any of these rights, send a privacy or GDPR request. I will reply within 30 days, and may ask you to confirm your identity first.

8. Security

The site is served only over HTTPS, is hosted in Microsoft Azure EU data centres behind a web application firewall, and access to your data is limited to what is needed to reply to you.

9. Children

This website is not aimed at children under 16, and I do not knowingly collect their personal data.

10. Complaints

If you are unhappy with how your data is handled, you can complain to the Data Protection Commission (Ireland) or your local supervisory authority.

11. Changes to This Policy

Any changes will be posted on this page with a new "Last updated" date.