Privacy policy

Last updated: 22 July 2026

About this policy

This policy describes how Nabarro Consulting collects, uses and protects personal data when you use nabarroconsulting.com. The data controller is David Nabarro, trading as Nabarro Consulting, an autónomo registered in Spain and based in Mallorca. For any questions about this policy or your data, email david@nabarroconsulting.com.

The principle: minimal by design

This site is built to collect as little personal data as possible. There is no login, no advertising, and no cookie-based tracking. The only time you hand over personal information is if you choose to send a message through the contact form or email us directly.

What we collect, and what we don't

The website itself. Standard server logs (IP address, browser type, page accessed, timestamp), used for security and abuse prevention. We use privacy-respecting analytics (Cloudflare Web Analytics) to count pageviews and measure performance; this does not set cookies, does not track individual visitors across pages or sites, and does not store personal data. We do not use advertising cookies or behavioural profiling.

The contact form. Name, email address and message content, used only to respond to your enquiry. Submissions are processed and stored by Netlify (our hosting provider) and forwarded to our email.

Email. If you email us directly, we hold the correspondence for as long as the conversation is live and for a reasonable period after.

Why we process this data

Under GDPR Article 6, we rely on:

• Consent when you send a message through the contact form
• Legitimate interest for basic server logs (security and abuse prevention) and for responding to enquiries you initiate

Third parties who process data on our behalf

We use a small set of established service providers to run the site. Each is bound by their own data processing terms.

• Netlify (United States). Hosts the website, serves it to your browser, and processes and stores contact form submissions.
• Cloudflare (United States). Receives anonymised request data via a small JavaScript beacon to count pageviews and measure performance. Cloudflare Web Analytics does not set cookies, does not track individual visitors, and does not store personal data.

International data transfers

Cloudflare and Netlify are based in the United States, so processing your data involves a transfer outside the European Economic Area. These transfers are made under standard contractual clauses or equivalent safeguards approved by the European Commission.

How long we keep your data

• Contact form messages and email correspondence: kept while the conversation is active, and for a reasonable period after, unless you request earlier deletion.
• Server logs: short retention, typically 30 days or less.

Your rights

Under GDPR and UK GDPR you can:

• Request a copy of the personal data we hold about you
• Ask us to correct anything inaccurate
• Ask us to delete your data
• Object to certain processing
• Lodge a complaint with the Spanish data protection authority (AEPD, www.aepd.es) or your local supervisory authority

To exercise any of these rights, email david@nabarroconsulting.com.

Cookies

The site does not set cookies. The Cloudflare Web Analytics beacon described above does not set any cookies and does not enable identification across sessions or sites. This is why there is no cookie banner: there is nothing to consent to.

Changes to this policy

If we update this policy, we will change the Last updated date at the top. Material changes will be highlighted at the top of the page for a reasonable period.

Contact

For any questions about this policy, your data, or how Nabarro Consulting handles privacy, email david@nabarroconsulting.com.