Who Controls Your Data

Data controller: Tajinder Singh (tajs.io).

If you have a privacy request, contact details are listed at the bottom of this page.

Information We Collect

Legal Bases for Processing (UK GDPR)

Contractual necessity: to respond to contact requests you submit.

Legitimate interests: to secure, operate, and improve website reliability and performance.

Consent: for non-essential analytics, which are enabled only after an explicit Accept action.

Third-Party Processors and Services

Trusted infrastructure and software providers are used to operate the website and contact workflows.

These providers may process limited data on behalf of tajs.io to deliver hosting, security, anti-abuse, email delivery, and analytics functionality.

• Cloudflare: hosting, caching, security, and bot mitigation
• Cloudflare Turnstile: anti-spam and bot checks for forms
• Resend (or configured email provider): contact form email delivery
• GitHub: source code and deployment workflows
• Google Analytics: website analytics loaded only after explicit consent

Cookies and Tracking

Non-essential analytics tracking is disabled by default. Google Analytics is loaded only if you provide an unambiguous opt-in by clicking Accept on the analytics banner.

If you click Reject, analytics tracking is not loaded.

You can revisit or change this choice using Analytics settings in the site footer.

Technically necessary storage or cookies may still be used for core security and service operation (for example anti-abuse protection).

No advertising cookies, cross-site ad identifiers, or behavioural advertising profiling are used.

Data Retention

Contact form messages are kept only as long as reasonably necessary to handle enquiries and related follow-up.

Operational and security logs are retained for limited periods appropriate for security, incident response, and platform reliability.

Analytics data retention is controlled in the configured analytics platform settings and reviewed periodically.

International Data Transfers

Some service providers may process data in countries outside the UK.

Where transfers occur, appropriate safeguards are used under applicable data protection law (for example contractual protections and provider security controls).

Your Rights

Under UK GDPR, you may have rights including access, rectification, erasure, restriction, objection, and data portability (where applicable).

To exercise your rights, contact the email address listed below. Requests are handled in line with applicable legal timelines.

Complaints

If you are not satisfied with how your data is handled, you can raise a concern with the UK Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/.

Children's Privacy

This website is not directed at children under 13, and personal data is not knowingly collected from children.

Security

Appropriate technical and organisational measures are used to reduce risks such as unauthorised access, misuse, and service abuse.

No internet service can be guaranteed to be fully secure.

Changes to This Policy

This policy may be updated to reflect legal, technical, or service changes.

The Last updated date is revised when material updates are made.