Privacy Policy

Last Updated: July 2026

At Collin Shea's Website Portfolio, accessible from your website URL, transparency and data protection are paramount. This document legally establishes how personal information gathered via our digital form is processed, secured, and stored.

1. Lawful Basis & Data Collection

We process personal communications under the lawful basis of Legitimate Interests (Art. 6(1)(f) GDPR) to facilitate business inquiries and direct professional outreach. We only gather data you explicitly volunteer in our contact form:

Email Address: Used strictly to verify identity and return a direct response to your message.
Message Contents: Text provided by you outlining your project or inquiry.

2. Data Processor Infrastructure (Forminit)

We do not store or host contact form submission histories locally on our server infrastructure. Instead, we utilize Forminit (a service compliant with EU and UK GDPR frameworks) as our contractually bound Data Processor.

Encryption & Transmission: All submission communications are fully encrypted in transit via TLS 1.2 or greater protocols, and securely stored at rest using AES-256 bit encryption algorithms.
Infrastructure Hosting: Forminit handles form submissions via application and storage nodes hosted strictly inside Amazon Web Services (AWS) data centers located within the European Union (EU) regions.
Automated Processing: Submissions are automatically parsed through Forminit's security infrastructure (including AI spam analysis) to verify integrity and block illicit payloads.
For further information, please consult the formal Forminit Privacy Policy.

3. Data Retention Limitation

We operate under strict data minimization compliance. Communication archives, including your email address and message contents, will be retained on Forminit's platform for a maximum period of 24 months following your last active correspondence, or until you execute your right to request deletion, at which time the dataset is entirely and permanently destroyed.

4. International Privacy Rights

Regardless of whether you reside in the EU, the United Kingdom, or under US frameworks (such as California's CCPA), you are granted full agency over your data. You may exercise the right to:

Request comprehensive copies of all historical communication records we hold.
Demand immediate remediation of inaccurate or outdated contact points.
Request absolute erasure (the "Right to Be Forgotten") of all records from both our local access portals and Forminit's cloud backups.

5. Data Controller Contacts

To request formal inspection, alteration, or complete purging of your personal records, contact the Data Controller directly via:

Email: collin.shea1015@gmail.com