Our Privacy Policy

This website is operated by Aidan McFarlane, based in Fukuoka, Japan. This notice applies to information handled through aidanmdesign.xyz, its hosted aidan-mcfarlane-portfolio.zellibot.chatgpt.site address, and the English, Japanese and Korean pages on those domains.

A business or service address for a statutory privacy request will be provided without delay through the Contact page. Do not use that route for unsolicited marketing.

The site is a professional portfolio for project, recruitment and collaboration enquiries. It does not sell products, run a mailing list or make automated hiring decisions.

• Enquiry information: name, email address, subject and message, plus any optional organisation, website, project or role type, markets, languages, deliverables and timing you provide.
• Enquiry context: page and action that led to the form, landing path, external referrer hostname and campaign parameters where present. Form contents are not sent to analytics.
• Security information: Cloudflare Turnstile processes technical signals used to distinguish legitimate visitors from automated abuse. The site receives a short-lived verification token. The application does not store the raw IP address in the enquiry record, although service providers may keep standard technical logs under their own policies.
• Site preferences: theme and language are stored on your device so the interface can remember your choice.
• Optional measurement: if you allow analytics, Google Analytics receives page, campaign, approximate location, browser, device and interaction information.

Where a legal basis is required, enquiry handling is based on steps you request before a possible contract and legitimate interests in responding. Security is based on legitimate interests. Optional analytics and third-party embeds are based on consent.

• To review and reply to project, recruitment, CV and collaboration enquiries.
• To assess fit, prepare requested services and keep a useful record of the conversation for a limited period.
• To secure the form, prevent spam and diagnose technical problems.
• To remember requested interface preferences.
• With your consent, to understand which pages and interactions are useful and to load optional third-party content.
• Where applicable, to meet legal obligations and establish, exercise or defend legal claims.

This site uses Cloudflare Turnstile to protect the contact form from spam and automated abuse. When Turnstile runs, Cloudflare may process technical signals including the IP address, TLS fingerprint, browser user-agent, Turnstile site key, website origin and verification interactions. This site does not intentionally send the enquiry fields to Turnstile.

Cloudflare uses these signals to provide and improve its bot-detection service. The site uses the resulting token only to decide whether the enquiry may be accepted. It is not used by Aidan McFarlane for advertising or mailing-list profiling.

Google Analytics is disabled until you select Allow analytics. If allowed, it measures page views and named interactions without receiving names, email addresses, enquiry text or other form-field contents. You can withdraw consent at any time through Privacy choices on this page.

The local @zelliphoto gallery does not require Meta. A live Instagram embed connects to Meta only after you choose Load live Instagram. The Figma prototype connects to Figma only after you choose to open it. External LinkedIn, Behance, Medium and archive links connect to their operators only when activated.

• Enquiries are marked to expire after 90 days and are removed during subsequent database cleanup. Information required for an active engagement, legal obligation or dispute may be kept longer where necessary.
• Turnstile verification tokens expire after five minutes and are single-use. Local submission rate-limit state is held for about 10 minutes. Cloudflare handles its technical verification information under its own policy.
• Theme and language preferences remain on your device until changed or cleared. Enquiry source information in session storage normally ends with the browser session.
• If analytics is allowed, Google Analytics cookies may remain for up to two years unless you withdraw consent or clear them sooner. Google controls its own server-side retention under the analytics property's settings.

OpenAI Sites provides the site's hosting and deployment service. Cloudflare infrastructure supports delivery, database operations and Turnstile security. Google receives analytics data only after consent. Meta and Figma receive technical connection data only when their optional content is activated.

These providers may process information outside Japan. Their own notices, contractual arrangements and applicable transfer safeguards govern that processing. Information may also be disclosed to professional advisers or authorities when legally required.

Personal information is not sold and enquiry details are not added to a mailing list.

Depending on the law that applies, you may request information about use, access, correction, deletion, restriction, portability, objection or cessation of use or third-party provision. You may also withdraw consent without affecting earlier lawful processing and may contact the relevant privacy regulator.

Use the Contact page to make a request and describe the information and action concerned. Reasonable proof of identity may be requested. A response will normally be sent by email without a fee and without undue delay; notice will be given before any exceptional permitted charge. A response may be limited where the law permits or requires it.

Reasonable technical and organisational safeguards are used, including encrypted transport, input validation, Turnstile verification, rate limiting and limited data handling. No online service can guarantee absolute security.

This notice does not control external websites. Review their notices before providing information. This policy may be updated when the site, providers or legal requirements change. The date above shows the latest revision.