Privacy Policy

Last Updated: 2 April 2026

Matthew Bowker ("I", "me", "my", or "the website") operates matthewbowker.uk. This Privacy Policy explains how I collect, use, and protect your personal information when you visit my portfolio website.

I am committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information I Collect

1.1 Information You Provide Directly

When you use the contact form on my website, I collect:

Your name
Your email address
The content of your message

1.2 Information Collected Automatically

I use Google Analytics (GA4) with cookie consent to collect analytical data about how you use my website, including:

Pages visited and time spent on the website
Your approximate geographic location (country/city level)
Device type, browser, and operating system
Referring website or source
IP address (anonymised by Google Analytics)

This data is only collected if you provide consent through the cookie consent banner.

2. How I Use Your Information

I use the information I collect for the following purposes:

Contact Form Data: To respond to your enquiries and communicate with you about potential work opportunities or projects.
Analytics Data: To understand how visitors use my website, improve user experience, and optimise content.

3. Legal Basis for Processing

Under UK GDPR, I process your personal data based on the following legal grounds:

Consent: When you submit the contact form, you consent to me processing your information to respond to your enquiry. For analytics, you provide consent through the cookie banner.
Legitimate Interests: I have a legitimate interest in improving my website and understanding visitor behaviour to present my portfolio effectively.

4. How I Store and Protect Your Data

Your data is stored securely using the following measures:

Webflow Hosting: Contact form submissions are stored securely on Webflow's servers, which employ industry-standard security measures including encryption, secure data centres, and regular security audits.
Google Analytics: Analytics data is processed and stored by Google in accordance with their security standards. IP addresses are anonymised.
Data Retention: Contact form data is retained for as long as necessary to respond to your enquiry and for a reasonable period afterwards in case of follow-up. Analytics data is retained according to Google Analytics' default settings (14 months).

5. Third-Party Services

I use the following third-party services that may process your data:

Webflow: Hosts my website and stores contact form submissions. Webflow is GDPR compliant. Privacy policy:

https://webflow.com/legal/privacy

Google Analytics (GA4): Collects website usage statistics (only with your consent). Privacy policy:

https://policies.google.com/privacy

I do not sell, rent, or share your personal information with any other third parties.

6. Cookies and Tracking Technologies

My website uses cookies in compliance with UK GDPR and the Privacy and Electronic Communications Regulations (PECR). I implement Google Consent Mode v2 to ensure analytics cookies are only set after you provide explicit consent through the cookie consent banner.

Types of Cookies Used

Essential Cookies: Used to remember your cookie consent preferences. These do not require consent.
Analytics Cookies: Google Analytics cookies track website usage. These are only set if you consent.

You can change your cookie preferences at any time using the cookie settings banner or through your browser settings.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of Access: You can request a copy of the personal data I hold about you.
Right to Rectification: You can request that I correct any inaccurate or incomplete data.
Right to Erasure: You can request that I delete your personal data (subject to legal obligations).
Right to Restrict Processing: You can request that I limit how I use your data.
Right to Data Portability: You can request a copy of your data in a machine-readable format.
Right to Object: You can object to processing based on legitimate interests.
Right to Withdraw Consent: You can withdraw your consent for analytics cookies at any time through the cookie banner or browser settings.

To exercise any of these rights, please contact me using the details in Section 9 below.

8. International Data Transfers

Some of the third-party services I use (Webflow and Google Analytics) may transfer and process your data outside the UK and European Economic Area (EEA). These transfers are protected by:

Standard Contractual Clauses (SCCs): Both Webflow and Google use SCCs approved by the UK Information Commissioner's Office (ICO).
Adequacy Decisions: Where applicable, data may be transferred to countries recognised by the UK as providing adequate data protection.

9. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact me:

Matthew Bowker

Email: hello@matthewbowker.uk

Website: https://matthewbowker.uk

10. Right to Lodge a Complaint

If you believe I have not handled your personal data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire
SK9 5AF

Telephone: 0303 123 1113

Website: https://ico.org.uk

11. Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in my practices or legal requirements. When I make significant changes, I will update the 'Last Updated' date at the top of this policy. I encourage you to review this policy periodically.

By using this website, you acknowledge that you have read and understood this Privacy Policy.

‍