Privacy policy

This policy explains what personal data is collected when you visit prospector.now or send a request through the form, what it’s used for, who else handles it, and the choices you have.

Who is responsible for your data

Prospector is run by Ilyas Kerbal, a freelance web and data scraping specialist (“I”, “me”). I decide how the personal data collected through this website is used, which makes me the data controller.

For anything related to your data, message me on LinkedIn.

What I collect

When you send a request

The request form asks for:

• the event name or link, and which people you want on the list
• your name and work email
• your company and any notes you add (both optional)

Your IP address and the page you sent the form from are recorded with each request, to filter spam and abuse. I also keep any emails or messages you send me afterwards.

Cloudflare Turnstile spam protection

The request form uses Cloudflare Turnstile to tell people from bots. Turnstile only loads when you scroll near the form. Once it loads, it collects your IP address, browser and device details, and signals about how the page is used, and may store data in your browser that it needs to run the check. Cloudflare uses this data to provide the service, under its own privacy terms.

Technical data

Like any website, the server that hosts prospector.now records basic request data, such as your IP address, browser type, the page you asked for and the time. These logs are used to deliver the site and keep it secure.

Google Analytics

This site uses Google Analytics to understand how visitors use it. Google Analytics records the pages you view, how you arrived (for example from a search engine or a link), your approximate location, your device and browser, and actions such as clicking a button, sending a request, reaching the end of a page or reading a blog post. It uses cookies to recognise returning visitors. I never send your name, email or the details you type into the form to Google Analytics.

You can stop Google Analytics from collecting data about you by blocking cookies in your browser or installing the Google Analytics opt-out browser add-on. The site’s fonts are served from this domain rather than from a third party, and it doesn’t use advertising trackers.

How I use your data

• To reply to your request, check what an event publishes and send you a sample or a quote.
• To deliver the work and keep business records if you become a client.
• To protect the form from spam and keep the website secure.
• To measure how visitors use the site, so I can improve its content and pages.

I don’t sell your data, and I only share it with the services listed below.

Legal basis

If you’re in the European Economic Area or the United Kingdom, I rely on:

• steps you ask for before a contract (Article 6(1)(b) GDPR) to answer your request and prepare a sample or quote
• legitimate interests (Article 6(1)(f) GDPR) to protect the form from spam, keep the site secure, measure how the site is used and follow up on a conversation you started
• legal obligations (Article 6(1)(c) GDPR) for invoices and accounting records

Services that handle your data

• n8n, a workflow automation tool, receives form submissions, checks the spam test with Cloudflare and forwards each request to my inbox. It keeps a log of recent workflow runs, which includes the details you sent.
• Cloudflare Turnstile, run by Cloudflare, Inc. (United States), provides the spam check on the form. See the Turnstile privacy addendum and Cloudflare’s privacy policy.
• Google Analytics, provided by Google Ireland Limited (for visitors in the EEA and UK) and Google LLC (United States), measures how the site is used. SeeGoogle’s privacy policy andhow Google uses data from sites that use its services.
• My email provider stores the requests and emails you send me.
• My hosting provider serves the website and keeps the technical logs described above.

International transfers

Cloudflare and Google may process data in the United States. If you’re in the EEA or the UK, this means your data is transferred outside those regions. Each provider describes the safeguards it uses for these transfers in its own privacy policy.

How long I keep it

• Requests and related emails: up to 24 months after our last contact, unless we work together.
• Client records and invoices: as long as tax and accounting rules require.
• Google Analytics data: deleted automatically after the retention period set in Google Analytics.
• Cloudflare Turnstile and hosting data: for the periods set by those providers.

Your rights

Depending on where you live, you can ask me to:

• give you a copy of the personal data I hold about you
• correct data that’s wrong or incomplete
• delete your data
• restrict or object to how I use it
• send your data to you or another provider in a portable format

Contact me using the details above and I’ll reply within one month. You can also complain to your local data protection authority.

Cookies

Google Analytics sets cookies (named _ga and _ga_*) to tell visits apart and recognise returning visitors. They last up to two years. Cloudflare Turnstile may store data it needs for the spam check once the request form loads. You can delete or block cookies in your browser settings.

Children

This website is for businesses and isn’t aimed at anyone under 16.

Changes to this policy

If this policy changes, I’ll update it on this page and change the date at the top. Significant changes will be made clear here.