DODOMINIC
← Back to portfolio

Legal

Privacy notice.

Last updated 5 October 2026

This notice explains what personal information this portfolio handles and why. The site is run by DOMINIC, based in London, United Kingdom.

What this site does not do

When you use the contact form

If you send an enquiry, the details you enter are used only to reply to you:

The form is delivered to DOMINIC as an email through Resend, an email delivery service, which processes it to send the message. A copy of your enquiry (the details above, plus the time it was sent and whether the email was delivered) is also saved in this site's database, a PostgreSQL database hosted by Prisma, so enquiries aren't lost if an email fails.

If you attach a file, it is either sent with the email (files up to 4 MB) or uploaded by your browser to a private Amazon Web Services (S3) storage bucket in London, with only a time-limited download link in the email. The file's name, type and size are recorded with your enquiry.

To stop repeated automated submissions, the server briefly keeps your IP address in memory (for up to 10 minutes). It is not written to storage.

Enquiries, including the saved copy and any attached file, are kept for: 12 months.

When you leave a comment

If you add a comment in the "What people are saying" section, the following is saved in this site's database: your full name, email address, optional company, the comment, an optional avatar image (stored privately in Amazon S3), and the date and time you sent it. So that comments can be moderated, the server also records your IP address and a short description of your device (for example "Mobile · iOS · Safari"), and that you gave permission for this. You are asked for that permission, with an unticked box, before you can send a comment.

DOMINIC is emailed a copy of these details to review your comment. Only DOMINIC, signed in to a private moderation page, can see your email address, IP address and device details. They are never shown on the site.

Comments are checked before they are shown. Once a comment is approved, your name, company, avatar, comment and date are visible to everyone who visits this site, so please don't include anything you wouldn't want to be public. A comment that is rejected is not shown to anyone.

To stop repeated automated submissions, the server also limits how many comments can be sent from one IP address. Comments and their details are kept until you ask for yours to be removed or DOMINIC deletes them; to ask, see "Your rights" below.

When you open the CV through Portfolio Access

The QR code on the Developer ID card opens a short Portfolio Access form, which asks for your full name, email address, mobile number and, optionally, your company, a link to your LinkedIn profile, your company's website and a portfolio or website link. If you choose "Continue with LinkedIn", you sign in on LinkedIn's own site and LinkedIn tells this site your LinkedIn member ID, name, profile photo and, if you allow it, your email address and language; this site never sees your LinkedIn password, doesn't keep any LinkedIn access token, and doesn't work out a profile link from your name. Those details are kept in a private cookie in your browser for up to an hour and are only saved if you then submit the form; "Disconnect LinkedIn" removes them before that. If you press Import next to the company website, this site's server visits that address once to read the site's public name and description (nothing is sent to that site except a normal page request from the server, not from your device). You can also attach one file: a photo (chosen from your device or taken with your camera, which is only switched on when you press Camera, and only for that photo) or a PDF, DOC or DOCX document, up to 4 MB. Photos are resized in your browser before they are sent. The file is stored with your submission in this site's database, attached to the notification email, and deleted when the submission is deleted. When you submit the form, the server also records the date and time, a short description of your device and browser (for example "Mobile · iOS · Safari", and the browser's user-agent text) and your IP address, as reported by the hosting provider. Nothing else about your device is collected, and no fingerprinting, advertising or analytics tools are used.

These details are used only to manage and monitor access to the CV. They are emailed to DOMINIC through Resend and a copy is saved in this site's database. To stop repeated automated submissions, the server also limits how many forms can be sent from one IP address. They are kept until you ask for yours to be removed or DOMINIC deletes them; to ask, see "Your rights" below.

When you request the résumé

The Resume button asks for your full name, email address and company. This site emails a six-digit PIN and a one-time link to that address; when you enter the PIN or open the link, your email is verified and the résumé downloads. The PIN and link expire after 10 minutes, work once, and are stored only as one-way hashes. No sign-in or approval is needed. The server records your details, the time of each step (request, verification and each download), your IP address as reported by the hosting provider, and a short description of your browser, operating system and device type (and the device model only where your browser openly reports it). No fingerprinting, advertising or analytics tools are used.

These details are used only for recruitment-related follow-up and to monitor access to the résumé. They are visible only to DOMINIC in a private administrator area, and the verification email is sent through Resend. Records, including the IP address and device information, are deleted 12 months after the last activity. You can ask for earlier deletion at any time (see Your rights below).

Hosting

Like any website, the hosting provider may record standard server logs (such as IP address, browser type and time of request) to keep the site running and secure. Hosting provider: Vercel Inc..

Images and links

Images are stored with Cloudinary but delivered through this site's own image service, so your browser does not connect to Cloudinary for them. Links to LinkedIn and GitHub open those sites, which have their own privacy policies.

Your rights

Under UK data protection law you can ask to access, correct or delete personal information you have sent, or object to how it is used. To make a request, email Dominic.Wokorach-O@outlook.com. You can also complain to the Information Commissioner's Office (ico.org.uk).