What data I collect, why, where it lives, how long it stays, and how to get it removed. No dark patterns, no industry-cargo-cult clauses.
If you fill in the contact form on this site, I collect your name, email address, and whatever else you choose to tell me (phone, company, the message itself). I use it to reply to your enquiry and, if we end up working together, to manage the engagement. I don't share it with anyone else, I don't sell it, and I don't use it for any other purpose.
If you want me to delete what I hold on you, email hello@mckee.wales and I will. No hoops.
McKee Consulting is operated by Mark McKee, an independent IT consultant based in Cardiff. For any data-protection matter, contact hello@mckee.wales.
I only collect personal data when you actively give it to me. That happens in two situations:
Anything you share with me in the course of an engagement — meeting notes, system diagrams, access credentials I hold for the duration of the work, invoice details. The same retention and rights apply to all of it.
This site does not use analytics, advertising trackers, social-network pixels, fingerprinting, or behavioural-profiling cookies. There are no third-party scripts beyond Google Fonts (used only to serve the brand typefaces, which doesn't set tracking cookies) and Cloudflare Turnstile on the contact form (used to verify you're not a bot — Cloudflare's privacy notes apply).
For contact-form submissions: legitimate interest under UK GDPR Article 6(1)(f) — responding to a business enquiry you've initiated. You also tick a consent box before submitting, which adds Article 6(1)(a) consent as a secondary basis.
For engagement-related data: contractual necessity under Article 6(1)(b) — performing the consultancy services we've agreed.
Contact-form data: 24 months from the last interaction unless we go on to work together, in which case I keep it as long as needed to manage the engagement plus the legal retention period required for invoicing and accounts (currently 6 years after the engagement ends, per HMRC rules).
After the retention period, I delete it.
Under UK GDPR you have the right to:
To exercise any of these rights, email hello@mckee.wales. I'll respond within one working day and complete the request within the statutory month.
This site does not use cookies. It uses local storage briefly during a contact-form submission to remember the form state if you accidentally navigate away — nothing personal, nothing persistent beyond that single visit.
If I change anything substantive, I'll update the "Last updated" date at the top of this page. Trivial corrections (typos, clarifications) won't bump the date. I'll never reduce your rights or expand the scope of data collection without telling you directly first.
— Mark McKee · hello@mckee.wales · May 2026