Privacy Policy

Disha Mukherjee is the data controller for personal data submitted through this site. You can reach me at datawithdisha@gmail.com.

When you submit the contact form, the site stores:

• your name;
• your email address;
• your organisation, if you choose to give one;
• the topic you pick from the dropdown;
• the message you write;
• the date and time you submitted it.

Nothing else is recorded with the submission — no IP address, no device fingerprint, no marketing identifiers. The form includes a hidden anti-spam field that humans never see or fill in; if it is filled in, the submission is discarded.

The single purpose is to read your message and reply to it. Under the UK and EU GDPR the lawful basis is legitimate interests (Article 6(1)(f)) — responding to someone who has deliberately contacted me about professional work. Your data is not used for marketing and is never sold or shared for advertising.

Submissions are stored in a Cloudflare D1 database and the site runs on Cloudflare Workers. Cloudflare acts as a processor on my behalf and operates a global network, so data may be processed outside your country under Cloudflare's own data-protection terms and standard contractual clauses.

Cloudflare also records short-lived operational logs for the Worker (errors and request diagnostics) so the site can be kept running.

Contact messages are kept for as long as the conversation they belong to is live, and reviewed at least once a year — anything no longer needed is deleted. If you would like your message removed sooner, email me and it will be deleted.

This site sets no cookies. It stores one item in your browser's local storage, theme, to remember whether you prefer the light or dark appearance. That value never leaves your browser and is not used to identify you, so no consent banner is required for it. Clearing your browser data removes it.

Fonts are served from this site rather than from Google, so simply loading a page sends no data to a third party.

The site links out to LinkedIn and to Calendly for booking a call. Following those links takes you to services with their own privacy policies, which govern anything you do there. Scheduling a call through Calendly means giving Calendly your details directly — that is outside this policy.

If the GDPR applies to you, you have the right to ask for a copy of your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. Email datawithdisha@gmail.com and I will respond within one month.

If you think your data has been handled improperly you can complain to your local supervisory authority — in the UK, the Information Commissioner's Office.

If this policy changes, the date at the top of the page changes with it.