Last updated 31 August 2026.
This site is a personal portfolio and CV for Chantell Collins (contact: chantell.collins@gmail.com). It doesn't sell products, offer paid services, or run advertisements. Here's the plain-language breakdown of what's tracked, the legal bases for processing, and where data goes.
This site uses Google Analytics 4 (GA4) solely to count two specific user actions: clicking "Book 15-min intro" and clicking through to LinkedIn. Nothing else on the page is tracked.
"Book 15-min intro" directs you to Google Calendar's external scheduling page. That form collects your name, email address, and company name directly. Google processes and stores that information under Google's Privacy Policy, and this site never receives or holds that data. Only the referral click to that page is logged in GA4 if consent was granted.
The LinkedIn links on this page are plain external hyperlinks. No personal data is transmitted from this site to LinkedIn beyond counting the outbound click in GA4 (subject to prior consent). LinkedIn's Privacy Policy governs their data collection.
A banner asks for consent before any tracking loads, using Google's Basic Consent Mode. If you reject or ignore the banner, GA4 never loads and none of the events above fire, the site works exactly the same either way.
These events tell Chantell that a click occurred, not who clicked. GA4 sets a cookie to distinguish repeat visitors from new ones and processes technical data (pseudonymized identifiers, approximate location derived from IP address, device and browser type, and referring page).
Legal basis: the basis for this processing is your consent under GDPR Art. 6(1)(a); nothing loads until you accept. Accepting stores that choice in your browser so you're not asked again on your next visit.
Changing your choice: you can withdraw or update your consent at any time using the "Cookie settings" link in the footer, which reopens the banner and updates Google's Consent Mode directly.
Your cookie preference (accept or reject) is stored indefinitely in your browser until you clear it or change it using Cookie settings. GA4 data itself is retained for 14 months, after which it's automatically deleted. See Google's own data retention documentation for details.
This site is hosted on GitHub Pages. Like most web hosts, GitHub's servers log basic technical data for every visit, this is standard server operation, not analytics. The site owner doesn't access these logs. The legal basis for this processing is legitimate interest under GDPR Art. 6(1)(f): keeping the site online and secure. GitHub's own privacy statement covers how it handles that data.
Google and GitHub are both based in the United States. Cross-border transfers of personal data to these providers are conducted under GDPR Art. 45, based on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework (DPF), under which both providers list active certifications. That remains the current legal basis for the transfer, but it isn't fully settled: in 2026, a U.S. Supreme Court ruling weakened the independence of the Federal Trade Commission, the DPF's primary enforcement body, and privacy advocates have announced plans to challenge the framework at the EU's top court as a result. Worth knowing plainly rather than glossing over.
If you're in the EU or EEA, you have statutory rights under Chapter III of the GDPR: access, correction, deletion, restriction of processing, data portability, and the right to object or withdraw consent at any time. For anything collected directly by this site (which is limited to the click counts described above), or with questions about any of this, email chantell.collins@gmail.com. For data held directly by Google (booking details, calendar entries), Google's own privacy tools and policy are the right place to start.
You also have the right to lodge a complaint with a supervisory authority. In Austria, that's the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at). If you're elsewhere in the EU or EEA, you can complain to your own local data protection authority instead.
This page is written in plain language on purpose. It's not a substitute for legal advice, and if you need a formal legal opinion on GDPR compliance, a qualified lawyer is the right person to ask, not this page.