Privacy Policy
Last updated: May 14, 2026
Introduction
This Privacy Policy explains how Ivan Nordgaimer ("I", "me"), trading as a sole trader in the United Kingdom, collects, uses, and protects your personal information when you visit nordgaimer.com (the "Website") or use my consulting services. I am the data controller for the personal data described below.
Data Controller
The data controller is Ivan Nordgaimer (sole trader), United Kingdom. To exercise any of your rights or to ask a question about how your data is handled, use the contact form on the homepage and mark your request as "Privacy enquiry".
Information I Collect
I collect information you voluntarily provide through the contact form: your name, email address, phone number (optional), company name, company size, and message content. If you consent, I also collect analytics data through Google Analytics 4, Google Tag Manager, Microsoft Clarity and Hotjar — including pages visited, time on site, device type, browser, approximate geographic location, and referral source. Necessary cookies (such as your cookie consent choice and UTM tracking) are used regardless of consent because they are required for the site to function.
Lawful Basis for Processing (UK GDPR Art. 6)
Contact form submissions are processed on the basis of your consent (Art. 6(1)(a)) when you submit the form, and on the basis of legitimate interests (Art. 6(1)(f)) to respond to your enquiry and develop a potential business relationship. Analytics cookies are processed only on the basis of your prior consent obtained via the cookie banner.
How I Use Your Information
Contact form submissions are stored in Notion and used solely to respond to your enquiry and, if applicable, to deliver consulting services. Analytics data is used to understand how visitors interact with the Website and to improve its content and performance. I do not sell, rent, or share your personal information with third parties for marketing purposes.
Third-Party Services
The Website uses the following processors: Vercel Inc. (hosting), Notion Labs Inc. (contact form storage), Google LLC (Google Analytics 4 + Google Tag Manager), Microsoft Corporation (Clarity), and Hotjar Ltd. Each operates under its own privacy policy. No other third-party services receive your personal data.
International Data Transfers
Some of the processors listed above are based outside the UK (notably in the United States). Where personal data is transferred outside the UK, the transfer relies on the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or — where applicable — an adequacy decision recognised under UK GDPR. You can request more detail on the safeguards in place by contacting me through the form.
Cookies
The Website uses strictly necessary cookies and, with your consent, analytics cookies. You can manage your preferences at any time via the "Manage cookies" link in the footer, or read the full Cookie Policy at /cookies.
Data Retention
Contact form submissions are retained for as long as necessary to fulfil the purpose for which they were collected, typically for the duration of our business relationship plus 2 years. Analytics data is retained according to Google Analytics default settings (currently 14 months).
Your Rights (UK GDPR)
Under UK GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. Where processing is based on consent, you have the right to withdraw consent at any time. To exercise any of these rights, use the contact form on the homepage. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Data Security
I take reasonable technical and organisational measures to protect your personal information. All data transmission is encrypted via HTTPS. Access to stored data is restricted and protected by authentication.
Changes to This Policy
I may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.
Contact
If you have questions about this Privacy Policy or wish to exercise your rights, use the contact form on the homepage.