Privacy, in plain English.

Who is responsible

Ciarán Paul Roche operates ciaranroche.com and is responsible for personal data submitted through it. Privacy questions and requests can be sent through the contact form or to CiaranPaulRoche@gmail.com; use “Privacy request” as the subject.

What is collected

If you use the contact form, the site stores your name, email address, optional subject and message. It also stores a one-way SHA-256 hash derived from the connection address so repeated automated submissions can be limited. The application does not store the raw address with the message.

Please do not send passwords, payment-card details, health records, government identifiers, trade secrets or other sensitive information. Sending a message does not by itself create confidentiality or a professional relationship.

Hosting and infrastructure providers may process ordinary network data, such as an IP address, browser details, request time and security events, to deliver and protect the site.

Why it is used

Contact data is used to read and reply to a message, manage any resulting conversation and protect the form from abuse. The usual legal basis is the legitimate interest in responding to a voluntary enquiry and keeping the service secure; where an enquiry concerns possible work, processing may also be necessary before entering a contract.

How long it is kept

Messages are kept only while needed to deal with the enquiry and reasonable follow-up. A record may be retained longer where necessary for security, accounting, legal claims or another legal obligation. Data that is no longer needed should be deleted or anonymised.

Who receives data

Messages are stored in a private owner-only inbox on the site’s hosting infrastructure. Personal data is not sold and is not used for advertising or a mailing list. Service providers receive data only as needed to host, secure or display the site.

• YouTube thumbnails load with the page; the privacy-enhanced YouTube player loads only after you choose Play.
• The public Bluesky feed is requested in your browser and may load media from Bluesky’s network.
• The artwork displayed in the portfolio is served directly by this site.
• The hosting platform and its infrastructure providers deliver the site and may keep operational or security logs.

Those providers may receive standard request data and may process it outside the EEA under their own terms and transfer safeguards.

Cookies and measurement

Optional Google Analytics measurement is available only after you choose “Allow analytics.” Until then, the Analytics code is not downloaded and no Analytics data is sent. If allowed, Google Analytics records page views and ordinary engagement information such as the page address and title, referring site, approximate location, and browser or device type. It uses an Analytics identifier stored in your browser to distinguish visits.

Advertising storage, Google signals and ad-personalisation signals remain disabled. Analytics is not used for advertising, and automatic site-search and form-interaction measurement are disabled. The legal basis for optional measurement is consent. You can decline without losing site features and can change or withdraw your choice at any time through the “Privacy choices” button; withdrawing also removes accessible Google Analytics cookies from this site.

Google may process Analytics data in the United States and other countries under its data-processing terms and applicable transfer safeguards. External services may separately use cookies or local storage when their content is requested, including when an embedded video player enters the page. Browser and hosting security features may also use essential storage.

Analytics section updated 31 August 2026.

Your rights

Depending on where you live, you may have rights to access, correct, erase, restrict or object to the use of your personal data, and to receive a portable copy. These rights are not absolute in every circumstance. Send a request through the contact form; identity may need to be verified before data is disclosed or changed.

People in Ireland and the EU may also complain to the Irish Data Protection Commission or their local supervisory authority.

Changes

This notice will be updated when the site’s data practices change. The revision date above shows the current version.