How I handle your data

What this site doesn't do

This site uses no cookies, no tracking and no analytics. It loads nothing from third-party servers. The fonts, images and videos are all hosted alongside the page itself.

What I receive

• Emails you send me at josh@joshlasmo.com. That includes your name, your email address and anything you choose to write, such as a link to your channel.
• Standard server logs kept by my host, Netlify. When you visit, their servers record technical details such as your IP address, browser type, the page you asked for and the time of the request.

If I emailed you first

If you run a YouTube channel, I may have contacted you about my services. Here's how that works:

• Where I got your details: I found your business email address where you published it publicly, such as on your YouTube channel. Along with it I may note your name and channel.
• Why: I contacted you about my services, and may have followed up once or twice. The legal basis is my legitimate interest in offering relevant services to businesses (GDPR Article 6(1)(f)).
• How long I keep it: if you don't reply, I delete your details within 12 months.
• Stopping it: you can ask me to stop contacting you and delete your details at any time. Just reply to my email or write to josh@joshlasmo.com. I'll stop straight away.

Why I use it

• Emails: to reply to you, talk about working together and, if we do, to carry out the work. The legal basis is taking steps at your request before a contract and performing that contract (GDPR Article 6(1)(b)), or my legitimate interest in answering messages sent to me (Article 6(1)(f)).
• Server logs: to keep the site running and secure. The legal basis is my legitimate interest in operating a working, safe website (Article 6(1)(f)). I don't look at these logs unless I need to fix a technical or security problem.

I don't sell your data, use it for advertising or make automated decisions about you.

Who else handles it

Netlify, Inc. hosts this site and processes the server logs on my behalf. You can read Netlify's privacy policy for details.

My email runs on Google Workspace, so Google stores emails on my behalf and acts only on my instructions.

Netlify and Google are both based in the United States, so this data may be transferred outside the EU. Both are certified under the EU-US Data Privacy Framework, which the European Commission recognises as giving personal data an adequate level of protection.

How long I keep it

• Emails: if we don't end up working together, I delete our conversation within 12 months of our last contact. If we do, I keep it for as long as we work together, plus any period Lithuanian tax and accounting law requires me to keep business records.
• Server logs: Netlify keeps these for a limited period under its own retention policy and then deletes them. I don't copy or store them myself.

Your rights

Under the GDPR you can ask me to:

• give you a copy of the personal data I hold about you
• correct anything that's wrong
• delete your data
• limit how I use it, or object to my using it
• send your data to you or someone else in a common format

I'll reply within one month. It's free unless a request is clearly unfounded or excessive.

You also have the right to complain to the Lithuanian State Data Protection Inspectorate (VDAI, Valstybinė duomenų apsaugos inspekcija), which oversees how I handle personal data. You can also complain to the data protection authority in the country where you live.

Contact

For any question or request about your data, email me at josh@joshlasmo.com.