Website information / Updated 18 October 2026

Privacy, kept simple.

A straightforward explanation of how website enquiries are handled, and how hosting and traffic measurement work.

Who is responsible

Michael James Mealy, an independent consultant operating as an autónomo in Spain, is responsible for the personal information handled for website enquiries.

Ctra Tranco KM8 Cortijo Chincolla s/n
23330 Villanueva del Arzobispo
Spain

For privacy questions or requests, email contact@michaeljamesmealy.com or write to the address above. Business identification details are available in the Legal notice.

Email enquiries

The website has no contact form or document-upload facility. Email links open your own email application. If you make contact, the information received may include your name, email address, organisation, role and any contact details or information you choose to include in your message.

Michael handles enquiries personally, using iCloud Mail. This information is used to answer your enquiry, assess whether the work is a suitable fit and discuss a potential engagement. It is not added to a newsletter or marketing list, sold, or used for automated decisions or profiling.

If you are a prospective client acting in your own name, the legal basis is taking steps at your request before entering a contract. For enquiries made on behalf of an organisation and other professional correspondence, the basis is the legitimate interest in responding to relevant business enquiries and managing professional relationships, balanced against your privacy rights. Any processing necessary to meet a legal obligation relies on that obligation.

Providing enquiry information is voluntary. Without a way to contact you and enough detail to understand your request, it may not be possible to respond meaningfully. Please keep initial enquiries non-confidential and do not send patient information, sensitive personal data or confidential technical documents before appropriate arrangements have been agreed.

How long enquiry information is kept

Enquiries that do not lead to work are deleted 12 months after the last substantive contact, unless discussions remain active or particular records need to be retained to meet a legal obligation or establish, exercise or defend legal claims. Any such exception is limited to the records needed and the relevant obligation or claim period.

If an enquiry leads to an engagement, relevant correspondence becomes part of the client record and is retained under the engagement arrangements and applicable legal, accounting and tax requirements. The 12-month enquiry period does not apply to those records.

Website delivery and security

The website is hosted on Cloudflare Workers with Static Assets. Cloudflare processes technical request information, which may include IP addresses, requested URLs, browser information, timestamps and security events, to deliver and protect the website. This operational processing is separate from audience statistics. The basis for processing under Michael’s responsibility is the legitimate interest in providing a reliable, secure professional website.

Michael does not export or maintain a separate archive of detailed visitor logs. Cloudflare’s operational records are subject to its service-specific retention practices. Relevant information is available in Cloudflare’s privacy policy.

Traffic measurement

Cloudflare Web Analytics provides aggregate information about page views, visits, referring websites and page performance. The purpose is to understand whether the site reaches a relevant audience and which content is useful. These statistics are not linked to email enquiries to identify individual visitors.

EU visitors are excluded from browser analytics. Cloudflare’s automatic-injection setting is configured to omit the analytics script for visitors it identifies as being in the European Union. Visits from Spain and other EU countries are therefore absent from these statistics. The exclusion concerns Web Analytics; it does not prevent the request processing needed to deliver and secure the website.

For eligible visitors outside the EU, Cloudflare automatically adds a small browser script. Cloudflare states that Web Analytics uses no cookies or local storage and does not fingerprint individual visitors. Where technical personal information is processed under Michael’s responsibility for this limited measurement, the basis is the legitimate interest in understanding and improving the professional website, balanced against visitors’ privacy rights. The analytics is not used for advertising, individual profiling or cross-site tracking.

Cloudflare currently makes the previous six months of Web Analytics statistics accessible. Its documentation describes seven days of unsampled beacon data followed by sampling for longer-term statistics; that dashboard period is not a promise that every provider record is deleted after six months. Michael does not maintain a separate archive of visitor-level analytics. See Cloudflare’s analytics documentation.

Browser blocking, sampling and geographic exclusions affect the figures. Visits are not a verified count of individual people, and the statistics do not represent the site’s entire audience. More information is available from Cloudflare Web Analytics. Privacy questions or objections can be sent to the contact address below.

Service providers and international processing

iCloud Mail (Apple) is used to receive and store correspondence. Cloudflare supplies website hosting, security and analytics services. Michael is the only person routinely handling enquiries; these providers process information as needed to supply their services. Information may also have to be disclosed where required by law or necessary for legal claims.

Apple and Cloudflare operate internationally, so information may be processed outside the European Economic Area, including in the United States. Apple describes standard contractual clauses for EEA transfers in its privacy policy. Cloudflare describes its applicable Data Privacy Framework participation and contractual safeguards in its privacy policy. You can contact Michael for further information about the safeguards relevant to your information. Processing is not restricted to Spain or the EU.

Your privacy rights

Depending on the circumstances, you may request access to your personal information, correction, erasure, restriction of processing or portability. You may also object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Send a request to contact@michaeljamesmealy.com. Only information reasonably needed to verify and handle the request will be sought. Requests are normally answered within one month; where a lawful extension is needed, you will be told within that month.

You may complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority. These rights are subject to the conditions and exceptions in data-protection law.

External links and changes

LinkedIn and image-source links are ordinary external links, not embedded content. If you follow them, the destination’s privacy practices apply. No advertising trackers, newsletter signup or remotely embedded social content are included in the site.

This notice will be revised if the website, providers or enquiry practices change. The review date appears above.