Privacy

Just browsing

Nothing that identifies you, unless you accept analytics — see below. No account, no cookie wall, no fingerprinting.

You enquire

Name, email, company, role, and whatever you type into the boxes about what you’re trying to do. That is a contract-formation conversation and I keep it.

You buy something

Name, email and what you bought. Card details go straight to Stripe and never touch my systems — I can see that a payment happened, not how you paid.

I send you a proposal

Your name, email, organisation and role, because I typed them in to address it to you. Plus how you read it — the next section is entirely about that.

If I’ve sent you a private proposal link — an address that looks like deanlynn.com/p/… — that document records how you read it, and it records it against your name. I’d rather tell you that here than have you find out from a well-timed phone call.

What is recorded

• Each time the link is opened, and when — first open and every return visit.
• Which sections you looked at and roughly how long you spent on each one, counted only while the tab is actually in front of you.
• How far down the document you got.
• Anything you do on purpose: choosing an option, accepting, declining, asking a question, requesting a change, printing or saving it as a PDF, clicking a link out.
• Whether you were on a phone, a tablet or a desktop, the width of the browser window, and the country the request came from.
• If you forward the link and someone else tells me who they are, their name and email — because they typed them in.

What is not recorded

No IP address is stored. No cookie is set by the document and no device identifier is kept, so I cannot recognise you anywhere else on the internet or link this to any other browsing you do. The country is the coarse two-letter code the network already attaches to the request — not a location. And none of this goes to Google, Plausible or PostHog: proposal pages are excluded from every third-party analytics tool on the site, precisely because the access token is in the address bar.

Why, and on what basis

Legitimate interest, in a business-to-business context (UK GDPR Article 6(1)(f)). The interest is straightforward and I’m not going to dress it up: knowing that you’ve read the commercials twice tells me whether to call you, and knowing which section you stopped on tells me what to fix. It is the same information I’d get from watching your face across a table, which is where this conversation would otherwise be happening.

I’ve weighed that against your side of it. This only ever applies to a document I wrote for you and sent to you by name; it is confined to that one document; it produces no profile, no scoring and no automated decision about you; and it is never combined with anything else or shared with anyone. It is not used for advertising and the data is never sold or passed to a third party for their own purposes.

How long I keep it

The reading history — opens, dwell, scroll depth, device — is kept for 24 months after the last activity on the link, then deleted. The proposal itself and its outcome (what you were sent, what it cost, whether you said yes) is kept for six years, which is how long I have to be able to evidence a commercial dealing. Your access link can be revoked or expired at any point and stops working immediately when it is.

How to object

Email dean@deanlynn.com and say you don’t want your reading tracked. No form, no reason needed. I will turn the tracking off for your link, delete the history already recorded, and if you’d rather have the document as a plain PDF with nothing in it at all, I’ll send you that instead. Asking costs you nothing — it doesn’t affect the proposal, the price, or whether I want the work.

Because this runs on legitimate interest rather than consent, you have an absolute right to object under Article 21 and I have to stop unless I can show compelling grounds that override yours. I won’t try. I’ll just stop.

The public site can load Plausible, GA4 and PostHog to tell me which pages are worth keeping. None of them load until you accept analytics in the banner, and declining changes nothing about how the site works. You can change your mind by clearing the site data in your browser.

Proposal pages are excluded from all three regardless of what you chose, as described above.

Email is sent through Postmark. Anything that is a marketing sequence carries an unsubscribe link, and unsubscribing is instant and permanent — I don’t run win-back campaigns at people who left.

Transactional email — a receipt, a password reset, my answer to a question you asked inside a proposal — has no unsubscribe link because it is a reply to something you did, and no open tracking on the personal ones.

Base44 (hosting and database), Stripe (payments), Postmark (email), Cloudflare (network), and — only with your consent — Google Analytics, Plausible and PostHog. They process it to run the service and for nothing else. Some are outside the UK, under the standard transfer safeguards. Nobody buys data from me, because none of it is for sale.

You can ask what I hold, get a copy, have it corrected, have it deleted, or tell me to stop processing it. One email to dean@deanlynn.com — I’ll answer inside a month and usually the same week. If I get it wrong you can complain to the ICO at ico.org.uk, though I’d rather you told me first.

If this changes materially I’ll date it at the top. I won’t quietly widen what I collect and leave the old page up.