How I handle what you send me.

What the contact form collects

Name, email address, the enquiry type you pick, and the details you write. A bot-check token from Cloudflare Turnstile is verified on the server and is not stored with your message. I do not publish an email address or phone number on this site.

Why, and who reads it

So I can reply about consulting, fractional work, or roles. I read every message myself. Nothing you send is used for marketing, sold, or shared for a third party’s own purposes.

Where it's stored, and for how long

Submissions are stored in a private PocketBase database on my VPS (reachable only from the contact API on loopback). Rows are deleted after24 months. Nightly backups age out after about30 days, so the practical maximum retention is about 24 months plus 30 days. Notification emails also land in my inbox and follow whatever retention that mailbox uses.

Third parties involved

• Cloudflare — DNS/CDN for the site, and Turnstile for bot checks on the form.
• Resend — sends the notification email to me when you submit the form (From: a sending address on jackbonner.co; Reply-To: your address).
• Calendly — if you book a call, you leave this site and use Calendly’s service under their terms. Booking links are outbound; Calendly is not embedded here.
• Umami — self-hosted, cookieless analytics at /stats/. It records page views and outbound “book a call” clicks as a conversion event. No advertising profile is built.

Analytics and cookies

Umami does not set tracking cookies for visitors. The contact form and site chrome do not use a marketing pixel. Theme preference may be stored in your browser’s local storage so dark/light mode sticks — that stays on your device.

Asking for deletion

Reply to any message from me (or use the contact form) and ask me to delete your submission. I’ll remove the database row and confirm. Inbox copies may take a short extra step on my side.

Changes

If this notice changes in a material way, I’ll update this page. Last updated July 2026.