Last updated: 15 July 2026
This notice explains how RDRN.DEV LTD collects and uses personal data — both on this website and in the course of providing data engineering services to clients.
Who we are
RDRN.DEV LTD is a company registered in England and Wales.
| Company number | 12718076 |
| Registered address | 20–22 Wenlock Road, London, England, N1 7GU |
| Data protection contact | matt@rdrn.dev |
| ICO registration number | [ICO_NUMBER] |
For the purposes of UK data protection law, RDRN.DEV LTD is the controller of the personal data described in this notice, except where we are acting as a processor on behalf of a client (see Client data below).
This website
This site is a personal and professional weblog. It has no accounts, no logins and no forms — you cannot create a profile here, and we do not ask you for your details.
No analytics, no tracking
We do not use analytics on this website. There is no Google Analytics, no PostHog, no tracking pixels, no advertising network and no third-party tracker of any kind. We do not measure our readers, and we could not identify you if we wanted to.
Comments on blog posts
Blog posts carry a comment widget provided by utteranc.es, which stores comments as issues in a public GitHub repository. If you choose to comment, you authenticate with GitHub and your comment, GitHub username and avatar become publicly visible on GitHub and on this site. This is entirely optional — simply reading the site involves no comment data at all.
Your interaction with utteranc.es and GitHub is governed by their own privacy policies, not this one. To delete a comment, delete it from the GitHub issue, or email us and we will remove it.
Lawful basis: consent, given by choosing to post a comment.
Hosting
The site is hosted on GitHub Pages. GitHub necessarily receives your IP address and browser details in order to serve the page to you, and may keep its own server logs. We do not have access to those logs. Apart from GitHub, the site loads no fonts, scripts or other resources from third-party servers.
Cookies
This site sets no cookies of its own, and needs no cookie banner.
The only exception is the comment widget described above: if you choose to interact with it, utteranc.es and GitHub may set cookies necessary for you to sign in and post. Simply reading the site sets nothing.
If you email us
If you email us, we hold your message and address for as long as needed to deal with it and to keep a record of our correspondence. Email is handled through standard commercial mail providers.
Lawful basis: legitimate interest in responding to enquiries, or steps taken at your request prior to entering a contract.
Clients and prospective clients
If you engage us, or discuss engaging us, we hold ordinary business contact and engagement details: names, work email addresses and telephone numbers, correspondence, contracts, proposals, invoices and payment records.
We use this to provide our services, to manage the relationship, to invoice and get paid, and to meet our legal obligations — company and tax law requires us to retain accounting records for six years after the end of the financial year they relate to.
Lawful basis: performance of a contract; legal obligation (accounting and tax); and our legitimate interest in managing client relationships.
Client data — our role as a processor
Our work involves building and maintaining data systems. In the course of that work we may have access to personal data held by a client — for example, when developing, testing or debugging a data pipeline.
Where this happens, the client is the controller and RDRN.DEV LTD is the processor. We handle that data only on the client’s documented instructions, under a written contract meeting the requirements of Article 28 of the UK GDPR. Specifically, we:
- process personal data only as the client instructs, and for no purpose of our own;
- do not use client data to train models, for research, or for any secondary purpose;
- keep it confidential, and apply appropriate technical and organisational security measures;
- engage sub-processors only with the client’s authorisation;
- assist the client with data subject rights requests, security incidents and impact assessments;
- notify the client without undue delay on becoming aware of a personal data breach;
- return or delete the data at the end of the engagement, as the client directs.
If your personal data is held by one of our clients and we process it on their behalf, please contact that organisation — as controller, they are responsible for answering your request. We will support them in doing so.
Sharing your data
We do not sell personal data, and we do not share it for anyone else’s marketing.
We share data only with service providers who help us operate — our hosting provider, email provider, and our accountant and payment providers — each acting under contract and on our instructions. We will also disclose data where the law requires it, or to establish or defend legal claims.
International transfers
Some of our providers — including GitHub, which hosts this site — are based in, or transfer data to, the United States and other countries outside the UK.
Where personal data is transferred outside the UK, we rely on the safeguards permitted by UK data protection law: an adequacy decision (such as the UK–US Data Bridge), or the International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses.
How long we keep data
| Data | Retention |
|---|---|
| Email correspondence | While needed for the matter, and normally up to 3 years afterwards |
| Contracts, invoices, accounting records | 6 years after the end of the relevant financial year (legal requirement) |
| Comments on blog posts | Until you or we delete them |
| Client personal data (processor role) | As instructed by the client; returned or deleted at the end of the engagement |
Your rights
Under UK data protection law you have the right to: access a copy of your data; have inaccurate data corrected; have data erased; restrict or object to our processing of it (including any processing based on legitimate interests); and receive certain data in a portable format. Where we rely on consent, you may withdraw it at any time, without affecting processing already carried out.
To exercise any of these, email matt@rdrn.dev. We will respond within one month. There is no charge.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first — we would like the chance to put it right.
You also have the right to complain to the UK’s supervisory authority:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF ico.org.uk/make-a-complaint — 0303 123 1113
Changes
We may update this notice from time to time. The date at the top shows when it last changed.