Privacy notice

How personal data is handled on this site, under the General Data Protection Regulation.

Controller

Macklin Buckler, [street address], [postal code and city], [country].
Email: macklin@harochi.io

What this site collects

This is a marketing site with no account system. Data is collected in five narrow places.

• Server logs. The hosting provider records your IP address, user agent, referring page, and the time of each request. This is necessary to deliver and secure the site, under Article 6(1)(f) GDPR.
• Usage analytics. Aggregated, cookie-free page and event counts, including which calls to action are clicked and how far down the page visitors scroll. No cross-site tracking and no advertising profiles.
• Newsletter signup (GTM, actually). If you subscribe via the form on this site or on the Beehiiv publication, your email address (and any other fields you choose to provide) is processed to send the weekly newsletter, under Article 6(1)(a) GDPR (consent). Double opt-in is used when enabled in Beehiiv. You can withdraw consent at any time via the unsubscribe link in each email.
• Speaking enquiry form. If you submit the form at /speak, the details you provide (name, contact details, and event brief) are emailed for reply and may also be forwarded to a private automation webhook for handling, under Article 6(1)(b) GDPR. There is no public submission database on this site.
• Direct contact. If you email or book a call, the details you provide are processed to respond to your enquiry, under Article 6(1)(b) GDPR.

Processors and third parties

• [Hosting provider]. Serves the site and keeps access logs.
• [Analytics provider]. Produces aggregated usage statistics.
• Beehiiv. Hosts the "GTM, actually" newsletter, the subscribe form embed, and the publication archive. Subscriber email and related signup data are processed by Beehiiv under their privacy notice. See beehiiv.com/privacy.
• Cal.com. Handles call bookings. When you open a booking link you leave this site and their privacy notice applies.
• FormSubmit. Relays speaking enquiry form submissions by email and retains a short archive (about 30 days) accessible to the site owner. Their privacy notice applies to that transmission.
• Automation webhook (optional). When configured, each speaking enquiry is POSTed as JSON to a private endpoint (for example n8n, Make, or Zapier) so it can be stored or routed elsewhere. That provider's privacy notice then applies to any data they hold.
• Fontshare and Google Fonts. Web fonts are requested from these providers, which means your IP address is transmitted to them. If fonts are self-hosted before launch, delete this entry.

Where a processor operates outside the European Economic Area, transfers rely on the European Commission's standard contractual clauses. [Confirm this per provider.]

Cookies

This site sets no cookies of its own and uses no cookie-based tracking, so no consent banner is shown. If that changes, this notice and the consent flow must be updated first.

Retention

Server logs are kept for [number] days. Analytics data is aggregated and holds no identifiers. Newsletter subscriber data is retained by Beehiiv until you unsubscribe or request erasure. Speaking enquiry forms and email correspondence are kept for as long as needed to handle your enquiry and to meet any commercial or tax record keeping obligations, then deleted.

Your rights

Under the GDPR you may request:

• Access to the personal data held about you (Article 15)
• Correction of inaccurate data (Article 16)
• Erasure (Article 17)
• Restriction of processing (Article 18)
• Portability of data you provided (Article 20)
• Objection to processing based on legitimate interests (Article 21)

To exercise any of these, email macklin@harochi.io. You also have the right to lodge a complaint with a supervisory authority, which for this site is [competent Landesdatenschutzbeauftragte].

Changes

This notice may be updated as the site changes. Last updated: [date].