This policy explains how I, Lacian Panton, use personal information through lacianpanton.com and the related client-service system. I am an independent freelancer based in Jersey, Channel Islands and, where I decide why and how personal information is used, I am the controller.
Privacy contact: support@lacianpanton.com.
1. What I collect
When you browse
I process the technical information needed to deliver, secure and operate the website. With your permission, I also use Google Analytics to understand how people find and use the site.
When you put something on my Desk
I collect the name, email address, message, links, categories and other details you choose to submit. I may also record whether I sent you a private response, whether that response was viewed and which follow-up option you selected.
When you enquire about a project
Open Door and the Project Estimator can collect details such as your name, email, phone number, company, website, project type, goals, timing, budget, features and the information you choose to provide about what you want to build.
When we work together
I may process proposal and agreement information, electronic signature evidence, project membership and permissions, messages, files, approvals, milestones, invoices, payment status, receipts and project activity.
Payments
Payments are processed through PayPal. My own system keeps the commercial records needed to identify invoices and payments, but I do not intentionally store your card number, card security code, bank login or PayPal password.
Bookings and emails
If you book a session through my booking provider, the information you enter there is handled by that provider. I also use service providers to send transactional emails such as proposal, agreement, payment, project and Desk communications.
2. Why I use it
- to respond to enquiries and Desk submissions;
- to prepare proposals and agreements;
- to deliver projects and manage client/collaborator access;
- to communicate, manage files, approvals and milestones;
- to invoice, confirm payments and provide receipts;
- to arrange booked sessions;
- to secure accounts, prevent abuse and investigate security issues;
- to understand and improve how my website is used;
- to operate interactive experiments; and
- to meet legal, tax, accounting and dispute-resolution obligations.
3. My legal bases
Depending on the situation, I process personal information because it is necessary to take steps you ask me to take before a contract, to perform a contract with you, to comply with a legal obligation, because I have a legitimate business interest that does not override your rights, or because you have given consent.
Where I rely on consent, you can withdraw it for future processing. Withdrawing consent does not make earlier lawful processing unlawful.
4. Google Analytics
I use Google Analytics to understand how people find and move through my website, which pages and experiences are useful, and how the site performs.
Google Analytics is only activated where the required Analytics permission has been given through my cookie preferences. Analytics permission is not treated as permission for advertising.
Google may process information generated by the analytics service in accordance with its own privacy terms. You can withdraw Analytics permission at any time through Change My Crumbs.
5. AI and interactive experiments
Some interactive experiments use third-party technology, including AI. For example, a feature may analyse a public website you provide or generate a visual from a prompt you submit.
Where your submission will be processed by an external AI or analysis provider, I will tell you before you submit it. Do not enter confidential or sensitive information into a public experiment unless it expressly says it is designed for that information.
I do not use these experiments to make legal or similarly significant automated decisions about you.
6. Who I share information with
I use trusted service providers where needed to run my business and deliver the website. These can include providers for website/database infrastructure, authentication, private file storage, transactional email, payments, project management, bookings, analytics, website analysis and AI-assisted experiments.
Current services include Supabase/platform infrastructure, Resend, PayPal, Plutio, Book Like A Boss, Google Analytics, Firecrawl and OpenAI where relevant to the feature you choose to use.
I may also disclose information where reasonably necessary to professional advisers, insurers, courts, regulators, law-enforcement bodies or other authorities.
I do not sell your personal information.
7. International processing
Some service providers may process information outside Jersey. Where Jersey data-protection law requires safeguards for an international transfer, I take reasonable steps to use an appropriate transfer mechanism or other lawful safeguard.
8. How long I keep information
I keep personal information only as long as reasonably needed for the purpose it was collected, an ongoing client relationship, or legal, tax, accounting, security and dispute requirements.
- Unconverted enquiries and Desk submissions: normally up to 24 months after the last meaningful interaction.
- Unaccepted or expired proposals: normally up to 24 months after expiry or the last meaningful commercial interaction.
- Routine project messages, approvals and working records: normally for the project and a reasonable period afterwards, usually up to 3 years unless they form part of a record that needs to be kept longer.
- Project files: for the active project and agreed handover/support period, then reduced or deleted when no longer needed, subject to any ongoing service or legal requirement.
- Executed agreements, invoices, receipts, payment evidence and core accounting/business records: retained for the period required by Jersey law and, where appropriate, for the time reasonably needed to establish or defend legal rights. Business records are generally kept for at least 6 years after the relevant year of assessment.
- Security and access records: kept for a proportionate period based on the security purpose and any investigation.
Some records may be kept longer where there is an active dispute, legal claim, regulatory requirement or another lawful reason. Where deletion is appropriate, some records may require manual review rather than automatic deletion.
9. Security
I use reasonable technical and organisational measures appropriate to the information I handle, including access controls, private project storage, secure authentication and restricted private links. No online service can guarantee absolute security.
10. Your rights
Depending on the circumstances and any applicable exemptions, Jersey data-protection law may give you rights to ask for access to your personal information, correct inaccurate information, request erasure or restriction, object to certain processing, receive certain information in a portable form, and withdraw consent where consent is the legal basis.
To make a privacy request, email support@lacianpanton.com. I may need enough information to verify that the request relates to you.
You also have the right to complain to the Jersey Office of the Information Commissioner.
11. Children
My professional website and services are not designed for children. If you believe a child has submitted personal information inappropriately, contact support@lacianpanton.com so I can review it.
12. Changes and contact
I may update this policy when the website, service providers, data practices or law changes. The latest version will show its effective date.
Privacy questions and requests: support@lacianpanton.com.