We collect as little as we can, keep it no longer than we need it, and never sell it. Questions go to tamsin@nethumanco.com.
The Net Human Company runs this website and is responsible for any personal data it collects. If you have a question about your data, or want to use any of the rights below, email tamsin@nethumanco.com. A person reads every message.
We collect as little as we can. This notice explains what that is, why, and who else is involved.
Our website is hosted by Vercel. Like any web host, Vercel's servers record technical details of each visit, such as your IP address, browser type and the page requested, to deliver the site and keep it secure.
We count visits with Plausible Analytics, which does not use cookies and does not store information that identifies you. We see totals, such as how many people read a page, never who they were.
Our fonts are served by Google Fonts, so your browser asks Google's servers for them, which means Google receives your IP address.
If you write to us, we use your name, email address and whatever you tell us to reply and, if you want to work together, to prepare and deliver that work. We rely on our legitimate interest in answering enquiries, and on taking steps towards a contract when you ask us to.
If you enter your email address to receive the Guardrails, we use it to send you the document. Our email provider, Kit, holds the address and sends the message for us. We rely on your consent, and every email has a link to unsubscribe. We do not sell or share sign-up addresses.
This site sets no advertising or tracking cookies unless you agree. If we run LinkedIn advertising, a banner will ask whether you accept a LinkedIn cookie that tells us whether our adverts reach the right people. LinkedIn's code only loads if you say yes. LinkedIn then acts as a separate controller of that data under its own privacy policy.
Your choice is saved in your browser so we do not ask on every page. That saved choice is not a cookie and is not sent to us. Change your cookie choice.
The rules on cookies come from the Privacy and Electronic Communications Regulations 2003.
The services named above (Vercel for hosting, Plausible for visit counts, Google for fonts, Kit for email, and LinkedIn if you accept its cookie) process data for these purposes only. Some of them are based in the United States. Where data leaves the UK, it is protected by the UK's adequacy arrangements or by standard contractual clauses.
We do not sell personal data, and we do not use it to train AI systems.
We keep enquiry emails while the conversation is live. If it leads to an engagement, we keep the related records for up to six years after it ends, for legal and accounting purposes. Sign-up addresses stay with Kit until you unsubscribe.
Under the UK General Data Protection Regulation you can ask for a copy of the data we hold about you, ask us to correct or delete it, object to how we use it, ask us to restrict it, or ask for it in a portable format. Where we rely on your consent, you can withdraw it at any time. We will reply within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office. If you live in the European Union, you can also complain to your local data protection authority. We would rather you told us first, so we can put it right.
We will update this page if what we collect changes. This version was published on 13 October 2026.