JR
Dr. James Roberts

Privacy Policy

Last updated: 3 July 2025

1. Who We Are

Dr James Roberts operates this website at drjamesroberts.com (the "Website"). This is a professional portfolio website showcasing expertise in technology and precision medicine.

Data Controller:

  • Name: Dr James Roberts
  • Email: hello@drjamesroberts.com
  • LinkedIn: https://www.linkedin.com/in/drjamesroberts/
  • Twitter/X: @JamesJRoberts

2. Information We Collect

2.1 Information You Provide to Us

We collect personal information when you:

  • Contact us directly via email or social media
  • Schedule meetings using our Calendly integration (name, email, meeting preferences, and any business details you choose to share)
  • Send inquiries about our services or expertise

2.2 Information Collected Automatically

When you visit our Website, we automatically collect:

  • Technical information: IP address, browser type, operating system, device information
  • Usage data: Pages visited, time spent on pages, click patterns, referring websites
  • Hosting data: Server logs and security monitoring data processed by our hosting provider

2.3 Third-Party Services

Our Website uses:

  • Calendly for meeting scheduling (subject to Calendly's own privacy policy)
  • Vercel for website hosting and performance optimization

3. How We Use Your Information

We use your personal information to:

  • Respond to your inquiries and provide professional consultation
  • Schedule and manage meetings for potential business opportunities
  • Improve our Website functionality and user experience
  • Ensure Website security and prevent fraud
  • Comply with legal obligations when required

We do not use your information for marketing emails or newsletters from this Website.

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

  • Legitimate interests (Article 6(1)(f)) - for responding to inquiries and maintaining our professional website
  • Consent (Article 6(1)(a)) - when you voluntarily provide information through contact forms or scheduling
  • Contract performance (Article 6(1)(b)) - when processing meeting requests for business purposes

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only in these circumstances:

  • Service providers: With Vercel (hosting) and Calendly (scheduling) as necessary for their services
  • Legal compliance: When required by law, court order, or regulatory authority
  • Protection of rights: To protect our rights, property, or safety, or that of others

6. International Data Transfers

Your data may be processed in countries outside the UK. When this occurs, we ensure appropriate safeguards are in place in accordance with UK data protection law, including adequacy decisions or standard contractual clauses.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Secure hosting infrastructure
  • Regular security monitoring
  • Access controls and authentication
  • Encrypted data transmission

However, no internet transmission is completely secure, and we cannot guarantee absolute security.

8. How Long We Keep Your Information

We retain your personal information only as long as necessary:

  • Contact inquiries: 2 years unless an ongoing business relationship develops
  • Meeting requests: As necessary for business relationship management
  • Technical logs: 12 months for security and performance purposes
  • Legal obligations: As required by applicable law

9. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data and receive a copy
  • Rectify inaccurate or incomplete data
  • Erase your data in certain circumstances
  • Restrict processing in certain situations
  • Data portability in structured, machine-readable format
  • Object to processing based on legitimate interests
  • Complain to us directly using our complaint process (see Section 12)

To exercise these rights, contact us using the details in Section 1.

10. Cookies and Similar Technologies

10.1 Our Use of Cookies

We do not directly set cookies on our Website. However, our hosting provider Vercel may use essential cookies for:

  • Website functionality and security
  • Performance monitoring
  • Basic analytics

10.2 Third-Party Cookies

Calendly may set cookies when you interact with the scheduling widget. These are governed by Calendly's privacy policy and cookie preferences.

10.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect Website functionality.

11. External Links

Our Website contains links to:

  • devongp.com
  • cliniprompt.ai
  • 4pmedicine.com

These websites have their own privacy policies and data practices. We are not responsible for their privacy practices and encourage you to review their policies before providing any personal information.

12. How to Complain

If you have concerns about how we handle your personal data:

  1. Contact us directly using the details in Section 1
  2. Use our complaint process: We will acknowledge your complaint within 5 working days and provide a substantive response within 30 days
  3. Contact the regulator: You can lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

13. Children's Privacy

Our Website is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. We will:

  • Post the updated policy on this page
  • Update the "Last updated" date
  • Notify you of significant changes where required by law

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights:

Email

hello@drjamesroberts.com

For data protection concerns, you can also contact the Information Commissioner's Office (ICO) at ico.org.uk.

This Privacy Policy is designed to comply with UK GDPR and the Data (Use and Access) Act 2025. It follows current UK data protection guidance and best practices for transparency and user rights. Last reviewed: 3 July 2025.