Skip to content

Privacy Policy

Who We Are

This website, attv.uk, is a personal portfolio operated by Tomasz Lewandowski. It is used to showcase projects, skills, and professional experience. We are committed to protecting your privacy and handling any personal data we collect in accordance with UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Data We Collect

We may collect and process the following types of data:

  • Contact form submissions: When you use the contact form, we collect your name, email address, subject, and message.
  • Project feedback: When you suggest a feature or report a problem on a project page, we collect the title and description you write, the page address, and your browser and operating system as reported by your browser. An email address is optional and only stored if you supply one and tick the box allowing us to reply. Problem reports may include screenshots you choose to attach; these are re-encoded on upload, which removes camera and location metadata, and they are visible only to the site owner.
  • Game leaderboard: The browser game Sekcja zwłok projektu has an optional leaderboard. To stop one player filling the table, saving a score requires confirming an email address with a one-time code. The address itself is not kept: once the code is confirmed we store only an irreversible keyed hash of it (to recognise a repeat entry by the same person) and a display mask showing the first and last three characters, alongside your nickname, score, scenario and date. The address exists on the server only for the ten minutes the code is valid. Conversations with the AI opponent go straight from your browser to the model provider — we never receive them.
  • Analytics data: We use Google Analytics (GA4) to collect anonymous usage data, including pages visited, time spent on the site, approximate geographic location, and browser or device information. This data is collected via cookies and does not personally identify you.

Please do not include personal or confidential information inside a screenshot — blur or crop it out before attaching the image.

How We Use Your Data

We use the data we collect for the following purposes:

  • Responding to enquiries: Information submitted through the contact form is used solely to respond to your message.
  • Improving the website: Analytics data helps us understand how visitors use the site, allowing us to improve content and user experience.
  • Consultation bookings: When you book a consultation we process your name, email, optional phone number, the topic brief, the appointment time and payment status. Payments are processed by Stripe — your email address is passed to Stripe to run the checkout, but we never see card details. A calendar invitation is created in Google Calendar with your name and email as the attendee, and a meeting-notes document containing your name and topic brief is created in Google Docs (Google Workspace). Your personal details are anonymised 24 months after the consultation; transaction records are kept up to 6 years for accounting.
  • Abuse prevention (feature voting): When you vote on a project roadmap, a one-way hash (SHA-256) of your IP address combined with the feature ID is stored for up to 24 hours to limit repeat votes. Your raw IP address is not stored, and the hash is automatically discarded after the throttle window expires.
  • Project feedback: Suggestions and problem reports are read by the site owner and used to fix bugs and decide what to build next. If you gave an email address and consented, we may use it to reply to your report — nothing else. A suggestion may be published on the public roadmap for others to vote on; when that happens only the wording of the idea is shown, never your email address. Reports are rate-limited using a one-way hash of your IP address, kept for one hour and then discarded.

Legal Basis for Processing

We process your personal data on the following legal grounds under the UK GDPR:

  • Legitimate interest: Processing contact form submissions to respond to your enquiry, and processing project feedback to fix faults and improve our software.
  • Consent: Analytics cookies are only set when you provide consent via the cookie consent banner. Where you supply an email address with a feedback report and tick the box, we rely on your consent to email you back; you may withdraw it at any time by writing to dev@attv.uk.

Newsletter & Subscriber Data

If you sign up for the attv.uk newsletter or request a free download (a “lead magnet”), we operate our own subscriber list and process the following data:

  • What we collect: your email address, an optional first name, and the consent record itself — the date and time you subscribed, the source of the sign-up, the version of the consent wording you agreed to, and a one-way hash (SHA-256) of your IP address. We do not store your raw IP address.
  • Purpose: to send you the articles, updates and the specific download you asked for, and to keep an auditable record that you gave consent (and, if you later withdraw it, that you did so).
  • Legal basis: consent under the UK GDPR. We use double opt-in — you must confirm your address by clicking a link in a verification email before any newsletter is sent. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
  • Email delivery processor: newsletter and transactional emails are sent through Brevo, which processes your email address on our behalf as a data processor.
  • Retention: we keep your subscriber record for as long as you remain subscribed. If you subscribe but never confirm your address, the unconfirmed (pending) record and its consent log are automatically deleted after 30 days. When you unsubscribe, your address is added to a suppression list (stored as a hash) so we do not contact you again, and the underlying subscriber record is retained only as long as needed to evidence the withdrawal.
  • How to unsubscribe: every newsletter email contains an unsubscribe link, and supported mail clients also show a one-click “Unsubscribe” button (RFC 8058 List-Unsubscribe). You can also email dev@attv.uk to be removed. Unsubscribing is immediate and irreversible from our side unless you choose to subscribe again.

Third-Party Services

This website uses the following third-party services that may collect or process data:

  • Google Analytics (GA4): Provides anonymous website usage statistics. Data is processed by Google. See Google's Privacy Policy.
  • Meta Pixel (when enabled): Measures how content shared on Facebook performs. Loaded only after you accept cookies. Data is processed by Meta Platforms. See Meta's Privacy Policy.
  • Google Fonts: Fonts are loaded from Google's servers, which may log your IP address. See Google Fonts Privacy.
  • Bootstrap CDN (jsDelivr): CSS and JavaScript frameworks are loaded from jsDelivr's content delivery network.
  • Brevo: our email service provider, used to deliver newsletter and lead-magnet emails to subscribers. See Brevo's Privacy Policy.
  • Off-site backups: Periodic backups of the site database — which include contact messages, newsletter subscriptions and booking records — are stored on an external FTPS storage server and on Google Drive. Backup archives are encrypted before upload when an encryption passphrase is configured, and old copies are rotated automatically. These providers act as data processors storing the backups on our behalf.

Some demo applications linked from this website (for example, FlyingPlan) run as separate services and may use additional third parties such as OpenStreetMap (Nominatim) for geocoding; those demos carry their own notices where applicable.

Cookies

This website uses cookies to support analytics and remember your preferences. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

Tesla Mode

Tesla Mode (attv.uk/tesla) keeps everything on your device. Favourites, recently opened items, your region preference, the full-screen session flag and the charging timer live in your browser’s local storage; there is no account and none of it is sent to our server. If you use “What is around me?”, your coordinates are read by your browser to build a Google Maps link and are never transmitted to attv.uk. at TV never connects to your Tesla account and reads no vehicle data. The car dashboard loads no analytics and no third-party scripts at all.

Data Retention

  • Contact form messages: Messages sent through the contact form are stored in the site’s database (name, email, subject, message) and a copy is emailed to the site owner. Messages are automatically deleted 24 months after they were received.
  • Bookings: Personal details attached to a consultation booking (name, email, phone, brief) are automatically anonymised 24 months after the consultation date. Transaction records (amount, date, payment reference) are retained for up to 6 years as required by UK tax and accounting law.
  • Project feedback: Suggestions and problem reports, together with any attached screenshots, are automatically deleted 12 months after they were submitted — the screenshot files are removed from the server at the same time. If a suggestion has been published on a public roadmap, the anonymous idea and its vote count remain on the roadmap.
  • Game leaderboard: One-time codes, and the email address attached to them, expire after 10 minutes and are deleted. Leaderboard entries contain no address and are kept until you ask for yours to be removed, or until the leaderboard is retired — write to hello@attv.uk from the address you used and the entry goes.
  • Analytics: Google Analytics data is retained in accordance with Google's data retention policy.
  • Backups: Encrypted off-site backups (see Third-Party Services) are rotated automatically; old backup copies are deleted according to the configured retention schedule.

Your Rights Under UK GDPR

Under UK data protection law, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct any inaccurate or incomplete data.
  • Right to erasure: You can request that we delete your personal data where there is no compelling reason for its continued processing.
  • Right to restriction: You can ask us to restrict the processing of your data in certain circumstances.
  • Right to data portability: You can request that we transfer your data to another organisation or directly to you, where technically feasible.
  • Right to object: You can object to the processing of your personal data where we rely on legitimate interest, and you can object to direct marketing (including the newsletter) at any time.
  • Right to withdraw consent: Where we rely on your consent — for example the newsletter — you can withdraw it at any time (by unsubscribing or contacting us), without affecting the lawfulness of any processing carried out before withdrawal.
  • Right to complain: You can lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office (ICO), if you believe we have not handled your personal data lawfully.

To exercise any of these rights, please contact us using the details below. We aim to respond within one month, in line with the UK GDPR.

We Do Not Sell Personal Data

We do not sell, trade, or otherwise transfer your personal data to third parties for commercial purposes.

Contact

If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us at hello@attv.uk.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable legislation. We encourage you to review this page periodically.

Last updated: July 2026