Privacy Policy

Website: https://www.joshuarousen.com/

Last updated: 30 August 2026

This website is operated by Joshua Rousen ("I", "me", "we", "us", "our").

Contact: Email Josh

I am the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy explains what data this website collects, why, and what rights you have. It applies to https://joshuarousen.com/ and does not cover any third-party websites you may reach via links from this site.

This website is built on Craft CMS and hosted in the United Kingdom with Unlimited Web Hosting (UWH). Website data, including analytics data described below, is stored on UK-based servers. No data from this site is transferred outside the UK.

I use Matomo, a self-hosted, privacy-first, open-source analytics platform, to understand how visitors use this site (for example, which pages are viewed and how many people visit). It runs on my own shared UWH server — it is not a third-party service, and no analytics data is shared with, or processed by, any outside company.

My Matomo installation is configured for cookieless, non-identifying analytics:

• No cookies are used for analytics. Visits are not tracked using cookies.
• IP addresses are anonymised. The last part of every visitor's IP address is removed (masked) before it is stored, so individual visitors cannot be identified from it.
• No personal or identifiable data is collected. Device model, screen resolution and User ID collection are all disabled, and any data matching known personally identifiable information (PII) patterns is filtered out before storage.
• Referrer data is limited. Only the referring website's host or type is recorded, not full referrer URLs.
• Campaign parameters are masked before storage.
• No visitor-level logs. Individual "visits log" and visitor profile features are disabled — we cannot look up or reconstruct an individual visitor's browsing session.
• No third-party cookies are set by Matomo.
• Aggregated report data is rounded to the nearest 10 to reduce the risk of small numbers being used to identify individuals.
• Data retention: analytics data is kept for 180 days, after which it is deleted.

Because this analytics setup does not identify individuals and does not use cookies or similar tracking technologies, it falls within the first-party statistical purposes exemption in the UK's Privacy and Electronic Communications Regulations (PECR), and I do not need your consent to run it. You do not need to take any action to opt out, as no identifying data about you is collected in the first place.

I do not use cookies for analytics, advertising or tracking of any kind.

If you contact me directly — for example, by email via on this site — I will process the personal data you provide (such as your name, email address, and the content of your message) for the sole purpose of responding to you. The legal basis for this is my legitimate interest in communicating with people who contact me, or, where applicable, taking steps at your request prior to entering into a contract with you.

I do not use this data for marketing unless you separately and explicitly agree to that.

I do not sell, rent or share your personal data with third parties. My website hosting provider (Unlimited Web Hosting) processes data on my behalf solely to host the website, its infrastructure, and the Matomo analytics.

• Analytics data: retained for 180 days, then deleted automatically.
• Correspondence (for example, emails you send me): retained only as long as necessary to deal with your enquiry, or as required by law.

Under UK GDPR, you have the right to:

• Access the personal data I hold about you.
• Have inaccurate data corrected.
• Have your data deleted, where applicable.
• Restrict or object to how your data is processed.
• Data portability, where applicable.
• Complain to the Information Commissioner's Office (ICO) if you believe your data has been mishandled.

Because my analytics data does not identify individuals, I am not able to locate or delete analytics data relating to a specific person, as no such link exists.

To exercise any of these rights in relation to other personal data (such as correspondence), get in touch.

I may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision.

You can email me with questions about this policy or how your data is handled.