Privacy

Darren Head, a private individual based in Tokyo, Japan, operating darrenhead.com as a personal portfolio. Contact: info@darrenhead.com.

• Chat queries — anything you type into the chat input is sent to Google Gemini to generate a response, and stored on Supabase so conversations can resume across sessions and so I can improve answers over time.
• Email address — only if you voluntarily provide one (via the email-gate to unlock additional content, or via the booking form). Kept until you ask me to delete it.
• IP address (hashed) — used for rate limiting and abuse prevention. The hash is one-way; the raw IP isn’t stored.
• Booking details — if you book a call, your name, email, agenda, and chosen slot are stored so the booking can be confirmed, rescheduled, and audited.
• Functional cookies — theme preference (light/dark) and sidebar state. No tracking cookies, no behavioural cookies, no advertising cookies.

The processors below handle parts of the data above on my behalf. I’m the controller (under Japan’s Act on the Protection of Personal Information, and under EU/UK GDPR for visitors in those regions).

• Google (Gemini API) — receives chat queries for response generation. Per Google’s API terms, queries are not used to train Google’s models.
• Supabase (EU-West region) — Postgres database for conversation history, bookings, and email-gate decisions.
• Resend — transactional email delivery (booking confirmations, gate unlocks).
• Vercel — hosting, request routing, edge functions, deployment infrastructure.
• Google Calendar — booking events are written to my Workspace calendar so I can attend.
• Upstash — Redis cache for rate-limit counters and availability caching.

No data is sold or shared with advertisers. There are no advertising or behavioural-tracking cookies on this site.

• Chat history — kept indefinitely so conversations can resume. Ask me to delete and I will.
• Email addresses — kept until you withdraw consent.
• Booking records — kept for 2 years for operational continuity and tax record-keeping.
• Hashed IP — kept for 30 days for rate-limit windows, then purged.

Regardless of jurisdiction, you can ask me to:

• Access the data I hold about you
• Correct anything that’s wrong
• Delete it (right to erasure)
• Export it in a portable format
• Stop processing it
• Withdraw any consent you’ve previously given

Email info@darrenhead.com with the request — I aim to respond within 7 days.

Supervisory authorities if you’re not satisfied with my response: in Japan, the Personal Information Protection Commission; in the UK, the Information Commissioner’s Office; in the EU, your national data-protection authority.

If this policy changes materially I’ll post a new “Last updated” date at the top. Older versions live in the site’s public git history.