Privacy Policy

Who this covers

This policy covers markrwatts.com. I'm Mark Watts, and I run this site personally — there's no company or organisation behind it. For any privacy questions, use the contact form.

What this site doesn't do

No cookies. No analytics or tracking scripts. No advertising. Fonts are self-hosted rather than loaded from Google, so your browser doesn't make requests to third parties just by visiting a page.

The contact form

If you fill in the contact form, the name, email address and message you provide are submitted directly to Static Forms (staticforms.dev), a third-party form-processing service, which forwards the message to my inbox. I don't store submissions in a database on this site. I use the information only to reply to you, and I keep it only as long as needed to do that.

The lawful basis for this processing is your consent in submitting the form, and my legitimate interest in responding to enquiries sent to me.

Downloads

The CISO First 90 Days Playbook and templates are direct downloads — no form, no email address required, no data collected.

Links to other sites

This site links out to LinkedIn, X, Bluesky, GitHub, Medium, Credly and Cardiff University. Once you follow one of those links, you're covered by that site's own privacy policy, not this one.

Your rights

Under UK GDPR, you have the right to access, correct, or ask me to delete any personal data I hold about you (in practice, this would only ever be a message you sent through the contact form). Get in touch via the contact form to exercise any of these rights.

Changes to this policy

If this policy changes, I'll update the date at the top of this page.