Privacy Policy
This site has no analytics, no advertising, no tracking pixels, and sets no cookies of its own. The only personal data it collects is what you deliberately type into the contact form.
1. Who is responsible
This site is operated by Paul Bennett, an individual. For questions about anything on this page, write to paul@cicerolearning.com.
This policy covers thepaulbennett.com and its pages. Napper,
the private application described at /napper, has its
own separate privacy policy — it handles
different data under different terms.
2. What is collected
If you use the contact form
You choose what to send. The form asks for:
- First and last name
- Email address
- Organisation — optional
- Your message
That is used for one purpose: so Paul can read your message and reply. It is not added to a mailing list, not used for marketing, and not shared with anyone.
If you only read the site
Nothing is collected by the site itself. There is no analytics script, no advertising network, no social embed, and no cookie set by this site.
Two things happen at the infrastructure level, as they do on any website: the host records ordinary server logs, and your browser fetches the typefaces. Both are described below.
3. Who processes it
A handful of providers are involved in running the site. Each processes data only to do its job, under its own terms and privacy policy.
| Provider | Role | What it can see |
|---|---|---|
| Vercel | Hosts the site and runs the contact-form function | Standard server logs — IP address, browser user-agent, page requested, timestamp |
| Cloudflare | Turnstile, the check that the form is being filled in by a person and not a bot | Your IP address and signals about your browser, used to score the request |
| Resend | Delivers the form submission to Paul's inbox | The contents of your message and your email address |
| Google Fonts | Serves the typefaces the site is set in | Your IP address, because the font files are fetched from fonts.gstatic.com |
The Google Fonts point is worth stating plainly because most sites do not: loading a font from Google's servers means Google sees the IP address of everyone who views the page. No other data is sent, and the fonts set no cookies — but if that matters to you, it is happening.
Cloudflare's bot check may store a short-lived token in your browser as part of verifying the challenge. That is a function of the security check, not tracking, and it is not used to identify you across sites.
4. What is never done
- Your data is never sold, rented, or licensed.
- It is never used for advertising or ad targeting.
- It is never shared with any party beyond the four providers above.
- You are never added to a mailing list for having written to Paul.
- No profile of you is built, and no behaviour on the site is tracked.
5. How long it is kept
A message you send becomes an email in Paul's mailbox and stays there as long as any other piece of correspondence — indefinitely, unless you ask for it to be deleted. Resend and Vercel hold their own logs for their own retention periods, which are set out in their policies rather than this one.
6. Legal basis, if you are in the UK or EU
Processing your contact-form submission rests on legitimate interests — you wrote to Paul in order to get a reply, and replying is the whole point. The bot check rests on the legitimate interest of keeping the form usable. No processing here relies on consent, because nothing optional is collected.
7. Your rights
You can ask what is held about you, ask for it to be corrected, ask for it to be deleted, or object to it being held at all. Write to paul@cicerolearning.com and it will be handled by a person, usually within a few days. There is no automated portal, because there is no database — only a mailbox.
If you are in the UK or EU and unhappy with the outcome, you have the right to complain to your national data protection authority.
8. Children
This site is aimed at businesses and professional contacts. It is not directed at children and does not knowingly collect data from anyone under 16.
9. Changes
If this policy changes, the "last updated" date above changes with it. The site is deliberately simple, so material changes should be rare.
10. Contact
Paul Bennett — paul@cicerolearning.com
Security reports — cicero@cicerolearning.com