Privacy and Cookie Policy

Last updated: September 2026

What I collect and why

If you use the contact form or email me, I receive your name, your email address and the content of your message. I use this to reply to you and to keep a record of our correspondence. The legal basis is Article 6(1)(b) GDPR, steps taken at your request before entering a contract, or Article 6(1)(f), my legitimate interest in responding to enquiries. Providing this data is voluntary, but without it I cannot reply.

The hosting platform also records technical data automatically, including your IP address, browser, device and the pages you visit. This is used to keep the site secure and working, under Article 6(1)(f).

I do not use automated decision-making or profiling, and I do not sell or share your data for advertising.

Cookies

The site sets a small number of strictly necessary cookies so that forms work, redirects behave, and your cookie choice is remembered. These do not require consent.

It also sets analytics cookies from Squarespace, which identify returning visitors and count page views. These last between 30 minutes and 2 years and are only set if you accept them. Rejecting them does not affect how the site works. You can change your mind by clearing this site's cookies in your browser and choosing again, or block cookies entirely through your browser settings.

Who else handles your data

Squarespace Ireland Ltd hosts the site and processes contact form submissions. My email provider stores messages you send me. Where correspondence relates to paid work, my accountant may see it for tax and accounting purposes. Each is bound by a data processing agreement. I can identify them on request.

These providers may process data outside the European Economic Area, including in the United States. Such transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

I may also disclose data where legally required, for example to a public authority or a court.

How long I keep it

Messages that do not lead to work are deleted within 12 months of our last contact. Correspondence connected to paid work is kept for the duration of the engagement and afterwards for the period required by tax and accounting law.

Your rights

You have the right to access your data, correct it, have it erased, restrict or object to how I use it, receive it in a portable format, and withdraw consent where consent is the basis. Withdrawing consent does not affect anything done beforehand.

Email contact@lezan.org to exercise any of these. I will respond within one month.

If you are unhappy with how I have handled your data, you can complain to a data protection supervisory authority, in particular the one in the country where you live or work.

Changes

I may update this policy. The current version is always on this page with the date of the last update at the top.