Privacy

Who is responsible

Myles Mellor, Derbyshire, United Kingdom. I am the data controller for this site. You can reach me at mylesmellor@gmail.com.

What the site does not do

There are no user accounts, no login and no newsletter sign-up. The site keeps no database of visitors — the one thing it stores is an enquiry you choose to send through the enquiry form, described below. Nothing else you do here is linked to a profile, because there is no profile to link it to.

The enquiry form

If you send an enquiry through /enquire, I collect what you put in the form: your name, email address, optionally your company and role, and your message. Three things then happen, and the page says so before you press send:

• It is stored in a database I control, hosted by Supabase (my processor), so enquiries live in a structured pipeline rather than an inbox.
• It is classified by AI — the enquiry text is sent to Anthropic (Claude) to score it against a written client profile. Anthropic handles it under their API terms and the request leaves the UK. The classification only files the enquiry; a person reads every one and makes every decision.
• I am notified by email, sent via Resend (my processor).

The legal basis is legitimate interest: you have asked me a business question and this is how I answer it. Enquiries are kept while they are relevant to a possible conversation and deleted when they are not — and deleted sooner if you ask.

Hosting

The site is hosted by Vercel. Like any web host, Vercel processes the technical details of each request — your IP address, the page requested, your browser's user-agent string — in order to serve the page and to keep the service running and secure. That processing is necessary for the site to work at all, and it happens whether or not you accept analytics. Vercel acts as my processor; their privacy policy sets out what they do with it.

Analytics

I use Google Analytics 4 to see which pages get read and roughly how people arrive. It runs only if you accept it — the default is off, nothing is loaded into storage before you choose, and refusing changes nothing about how the site works for you. Google acts as my processor and the data may be processed outside the UK, including in the United States.

Google Analytics is the only measurement on this site. If you refuse, this visit is simply not counted anywhere — there is no cookieless fallback quietly counting you instead. The cookies page sets out exactly what is stored, and lets you change your mind at any time.

The AI features — read this one

Two things on the CV page send text you type to companies other than me:

• “Ask about Myles” — the question you type is sent to OpenAI (to turn it into a search vector) and to Anthropic (to write the answer).
• The job-description fit tool — the job description you paste is sent to the same two companies, for the same two purposes.

This site does not store either of those. The text is used to produce the answer you see and is not written to any database, log or file of mine. OpenAI and Anthropic handle it under their own terms as API providers, and the request leaves the UK.

So please do not paste anything confidential — your own, your employer's, or anyone else's. A job description that is not yet public is a good example of something to keep out of it. There is no way for me to un-send something once it has gone.

Both features are rate-limited to keep costs sane. That means your IP address is held briefly in the server's memory to count requests. It is not written to storage, is not linked to anything else, and disappears when the server instance recycles.

Errors

When something goes wrong, the error itself is written to the hosting platform's logs so I can find and fix it. The question or job description that triggered it is not written there.

How long anything is kept

Enquiries as described above; otherwise nothing on my side. Analytics data is retained under Google's own settings for the property; hosting logs under Vercel's. The consent choice you make lives in your own browser until you clear it or change it.

Your rights

Under UK data protection law you can ask for access to personal data I hold about you, ask for it to be corrected or deleted, object to how it is used, or withdraw consent to analytics at any time (the cookies page does that in one click). In practice I hold almost nothing about you, so the honest answer to most such requests will be that there is nothing to produce — but ask, and I will tell you plainly.

If you are unhappy with how I have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If what the site does changes, this page changes with it and the date at the top moves. If the change is material — a new thing collected, a new third party — the analytics consent version is bumped too, which means you are asked again rather than assumed to have agreed.