Privacy Notice
1. Who is responsible
This website is operated by Alexander Hepburn, trading as Quiet Signals Lab, a sole proprietorship (eenmanszaak) registered in the Netherlands.
- KvK: 99556650
- VAT: NL005394204B58
- Legal form: sole proprietorship (eenmanszaak), KvK 99556650, VAT NL005394204B58
- Address: Box E2268, Keurenplein 41, 1069 CD Amsterdam, Netherlands
- Contact: hello@quietsignalslab.com
Alexander Hepburn is the data controller within the meaning of the General Data Protection Regulation (GDPR / AVG).
2. What data we collect and why
This is a static portfolio site. The table below covers all personal data processing that occurs.
| Activity | Data | Legal basis | Retention |
|---|---|---|---|
| You send a contact message | Name, email address, message content | Legitimate interest (responding to a business inquiry) | Until the inquiry is resolved, then deleted within 12 months |
| Site is served via GitHub Pages | IP address, browser/OS, referring URL (server logs) | Legitimate interest (standard infrastructure logging) | Controlled by GitHub — see GitHub's privacy statement |
This site does not use analytics tools, advertising trackers, or any cookies. No profiling takes place.
3. Who we share data with
Contact messages are received directly by Alexander Hepburn. No data is sold or shared with third parties for marketing purposes. The only third-party infrastructure involved is GitHub Pages for website hosting.
4. Transfers outside the EEA
GitHub Pages is operated by GitHub, Inc. (US). GitHub relies on Standard Contractual Clauses to legitimise transfers of personal data outside the European Economic Area. Details are available in GitHub's privacy documentation linked above.
5. Your rights
Under the GDPR you have the right to:
- Access — request a copy of personal data held about you
- Rectification — ask for inaccurate data to be corrected
- Erasure — ask for your data to be deleted where no overriding legitimate ground applies
- Restriction — ask for processing to be restricted while a dispute is resolved
- Objection — object to processing based on legitimate interest
- Portability — receive data you provided in a structured, machine-readable format
To exercise any of these rights, email hello@quietsignalslab.com. Requests are handled within 30 days.
6. Complaints
If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Dutch supervisory authority:
- Autoriteit Persoonsgegevens (AP)
- autoriteitpersoonsgegevens.nl
7. Changes to this notice
If this notice changes materially, the updated version will be published at this URL with a revised date. Given the minimal nature of data processing on this site, significant changes are unlikely.
8. Chatbot interactions
If you have interacted with a chatbot powered by Quiet Signals Lab on Facebook Messenger or Instagram, a separate policy applies to that data processing.
9. App privacy policies
Privacy policies for individual apps published by Quiet Signals Lab are listed below.
- ShadowClip — on-device image redaction for macOS and iOS. No data leaves your device.
- Solander — on-device document redaction for macOS. Documents never leave your Mac; we hold a purchase record for licensing.