Last updated: 14 June 2026
This site is run by Raife Dowley (“I”, “me”). I keep data collection to a minimum — there’s no analytics, no advertising network, and no newsletter on this site. This policy explains the little data that is involved when you visit raifedowley.com and what your rights are under EU data protection law (GDPR), as applied in Spain.
Who’s responsible for your data
Raife Dowley is the data controller for this site. For any privacy question, or to exercise your rights, email raife@raifedowley.com.
What I collect, and why
- When you visit: the site is hosted on Cloudflare Pages. Cloudflare automatically logs technical data such as your IP address, browser type and the pages requested, in order to deliver the site and protect it from abuse. Legal basis: legitimate interest in running a secure, working website.
- Fonts: pages load typefaces from Google Fonts. When they load, your IP address is visible to Google. Legal basis: legitimate interest in presenting the site as designed.
- When you use the contact form: your name, email address and message are sent to me via Formspree, which processes the submission and forwards it to my inbox. I use this to read and reply to you. Legal basis: your consent / steps taken at your request.
- Cookies: see the Cookies section below.
I do not run Google Analytics or any other analytics tool, I do not operate a newsletter, and there are no comments on this site, so I don’t collect data for those purposes.
Cookies and embedded content
A small consent banner (Cookie Notice / CookieYes) stores a cookie that records your choice so the banner doesn’t keep reappearing. Some articles embed third-party content such as YouTube videos or Canva designs. These embeds can set their own cookies and collect data about your interaction once you play or interact with them — exactly as if you visited YouTube or Canva directly. I don’t control those cookies; please see Google’s and Canva’s own privacy policies.
Affiliate links
Some links on this site are affiliate links (managed with ThirstyAffiliates). If you click one and buy something, the retailer may set its own cookies and I may earn a commission at no extra cost to you. See the Disclaimer for more.
Third parties I share data with
Only the providers needed to run the site: Cloudflare (hosting and security), Google (fonts; YouTube embeds), Formspree (contact form), and Canva (embeds, on some pages). I don’t sell your data or share it for advertising.
International transfers
Some of these providers (Formspree, Google, Cloudflare) are based in the US or process data globally. Where data leaves the EEA, it’s covered by appropriate safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses.
How long I keep it
Contact-form messages are kept only as long as needed to deal with your enquiry and any follow-up. Server logs held by Cloudflare are retained for a short period under their standard policy.
Your rights
Under the GDPR you have the right to access your data, correct it, erase it, restrict or object to its processing, request portability, and withdraw consent at any time. To use any of these, email raife@raifedowley.com. If you’re unhappy with how your data is handled, you can complain to Spain’s data protection authority, the Agencia Española de Protección de Datos (AEPD, aepd.es), or your local supervisory authority.
Children
This site isn’t directed at children and I don’t knowingly collect data from anyone under 16.
Changes
I may update this policy as the site changes. The “last updated” date above always reflects the current version.