What this site does with your details.

This is my personal professional website. It is deliberately a quiet one: there is no account to create, nothing to buy and no advertising. The only information it asks for is what you choose to send me, and the only optional tracking is analytics, which stays off until you say otherwise.

Who is responsible

I am, personally. Drew McMaster is the operator of this site and the data controller for anything it collects. If you want to ask about any of this, or exercise any of the rights below, email [email protected].

What the contact form collects

The form on the contact page asks for your name, your email address and your message, and records which subject you picked and which page you sent it from.

The enquiry form on the small business web design page asks for a little more, because it is a quote enquiry: your name, your business name, your email address, your phone number, roughly where you are, and what you need.

Both forms carry one hidden field that you will never see. It is there to catch automated submissions, and if anything fills it the message is silently discarded rather than sent.

Why, and on what basis

To read your message and reply to it, and to carry on the conversation if it turns into one. The lawful basis is legitimate interests: you contacted me, and answering you is the obvious and expected thing to do with what you sent.

I do not use enquiries for marketing. There is no mailing list, and I will not add you to one.

How long enquiries are kept

For as long as is reasonably necessary to answer you, to manage any correspondence that follows, and to manage any working relationship that comes out of it. I have not set an arbitrary deletion date, because I do not operate one and would rather not claim a practice I do not follow.

Where an enquiry becomes a piece of work, the relevant correspondence and records may be kept for longer, for as long as that relationship or any legal or accounting requirement reasonably needs. You can ask me to delete your enquiry at any time and I will, unless I am genuinely required to keep it.

Who else sees it

Three companies are involved in running this site, and only in running it. None of them is sent your details for their own purposes.

• Resend delivers the form to my inbox as an email. Your message passes through their service to reach me.
• Cloudflare hosts the site, so their servers handle the request that carries your form, and their Turnstile check runs on the forms to keep automated submissions out. That check is given your IP address so it can tell a person from a bot. Your IP address is not stored by me and is not included in the email I receive.
• Google receives analytics data, and only if you have agreed to it. That is the only thing Google is sent from this site; even the typefaces are served from here rather than from Google Fonts. More on that below.

Cookies

There are three, at most, and two of them only exist if you say yes to analytics.

Analytics, and your choice

I use Google Analytics to see which pages people read and roughly how they got there. It helps me work out which of this is worth keeping. It is not used for advertising, and there is no advertising tracker on this site at all.

Nothing analytics-related happens until you agree. Before you answer the question, Google Analytics is not loaded, no analytics cookie is set and no request is made to Google's analytics servers. If you say no, that stays true.

If you say yes and later change your mind, use Cookie settings here or in the footer of any page. Withdrawing turns Google's own off switch on, clears the two analytics cookies, and stops them being set again.

Google keeps what it collects for a limited time. On this property, event data is kept for 2 months and user data for 14 months. User data has "reset on new activity" turned on, which means a returning visitor's 14 months starts again from their most recent visit; the 2 months on event data is not affected by that.

Fonts

The site's typefaces are served from this site, not from Google Fonts or any other font service. Your browser fetches them from drewmcmaster.com along with everything else, so no third party is told you are here in order to render the text.

What this site does not do

No advertising or retargeting trackers. No social media pixels. No profiling, and no automated decisions made about you. No selling or sharing of anything you send me. No accounts, so no passwords.

Your rights

Under UK data protection law you can ask me for a copy of what I hold about you, ask me to correct it, ask me to delete it, ask me to restrict what I do with it, and object to my processing it. Email [email protected] and I will deal with it myself, because there is nobody else here to pass it to.

If you are not happy with how I handle it, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If what the site does changes, this page changes with it, and the date below changes too. If the cookie categories ever change, the question is asked again rather than an old answer being stretched to cover something it was never given for.

Last updated: 8 October 2026