Privacy policy

This site is run by Nic Chin, an independent AI architect based in the United Kingdom. I decide what personal data the site collects and why, so I am the controller under UK GDPR. For anything on this page, email nic.chin@nicchin.com.

What is collected, and why

• Enquiries. When you send the contact form or give your details in the chat, I store your name, email, company if given, what you described, any timeline or budget you mention, how you heard about me, and where your visit came from (landing page, referrer, campaign tags, and the approximate city and country of your connection). I use it to reply and to understand which channels bring enquiries. You get a confirmation email; I get a copy.
• The AI chat. Your messages and the assistant's replies are stored with a random guest account the site creates for your browser, so the conversation survives a page reload. The model is also given your approximate location (city, country and coordinates derived from your IP address) so it can answer with local context. A short extract of each message appears in server logs used to monitor answer quality.
• Abuse protection. To stop bots and abuse, your IP address is held in short-lived counters for up to 48 hours (a block lasts 24 hours), and appears in a daily abuse log kept for 7 days only if a limit is hit.
• Analytics. Google Analytics measures visits with IP anonymisation and without ad personalisation; Google signals is on, which adds aggregated demographic reports. In the UK, the EEA and Switzerland it sets no cookies until you accept them in the banner. Vercel Web Analytics counts page views without cookies. Visits from browsers sending Do Not Track are not measured.

Legal basis

Replying to enquiries, running the chat you chose to use, and protecting the site from abuse rely on legitimate interests. Analytics cookies in the UK, the EEA and Switzerland rely on your consent, which you can change at any time by clearing this site's data in your browser, which brings the banner back.

Who processes it

• Vercel - hosting, server logs and cookieless analytics
• Supabase - the database holding chats and enquiries
• OpenRouter, and the model provider it routes each request to - to generate chat replies; your messages are sent to them
• Resend - sends the confirmation and notification emails
• Google - Analytics, as described above
• Calendly - only if you follow a booking link, under Calendly's own privacy policy

Some of these providers process data outside the UK, including in the United States. Nothing is sold, and no one else receives your details.

How long it is kept

Enquiries and chat conversations are kept until you ask me to delete them; there is no automatic deletion yet. Abuse-protection records expire as described above. Analytics data follows Google Analytics' retention setting for this site.

Cookies and browser storage

• nc_attr - remembers the page and campaign that brought you here, for 90 days, so an enquiry can be attributed
• The sign-in session cookie for the chat's guest account
• Google Analytics cookies (_ga), only as described above
• Browser storage for your cookie choice, theme, an unsent chat draft, and flags that stop the same event being counted twice

Your rights

You can ask for a copy of your data, for it to be corrected or deleted, or object to how it is used, by emailing nic.chin@nicchin.com. I reply within one month. If you are unhappy with the answer, you can complain to the Information Commissioner's Office at ico.org.uk.

Back to the homepage