This notice is for people I have written to, or may write to, about my work. It says what I hold about you, where it came from, what I do with it and how to make me stop.
Who is responsible
Ivan Krišto, an independent Microsoft Power Platform and Microsoft 365 consultant based in Čapljina, Bosnia and Herzegovina. For anything about your data, write to ivan@ivankristo.co.uk, the mailbox my outreach comes from.
What I hold
If I have written to you or your company, I may hold:
- your name and job title, as published;
- your company's name, website, address and line of work;
- your business email address if it is printed on your company's website, otherwise your company's general mailbox;
- where each of these details was found, and when;
- the emails between us.
I do not hold private addresses, private phone numbers or any sensitive personal data. My emails are plain text, with no tracking pixels and no tracked links.
Where it comes from
Only public business sources: your company's own website, Companies House, public business listings such as Google Maps, and published public sector contract notices. I do not buy lists.
Why I use it
To write to you, as a person in a business role, about work I could do for your company on the Microsoft 365 it already uses. If you do not reply, I send at most two short follow ups and then stop.
Lawful basis
Legitimate interests (UK GDPR Article 6(1)(f)): offering a relevant professional service to a business. I have weighed this against your interests. The data is limited to your business role, and you can stop it at any time.
Who else handles it
Service providers that process it for me, under their own terms: Microsoft (email and storage in Microsoft 365), GitHub (my private working notes, which only I can access), Anthropic (help with drafting a message, which can include your name and your company's name) and Google (the business listings search). Your details are not sold, rented or shared with anyone else.
How long I keep it
If there is no reply within twelve months of my last message, I delete your details and our emails. If you ask me to stop, I keep only your email address and your company's name on a do not contact list, so that you are never written to again.
Your rights
Under the UK GDPR you can ask for a copy of what I hold about you, ask me to correct it, ask me to delete it, and object to direct marketing at any time. An objection to direct marketing is always honoured. You can complain to the Information Commissioner's Office (ico.org.uk), or in Ireland to the Data Protection Commission (dataprotection.ie).
How to make me stop
Reply to any of my emails with the word stop, or write to ivan@ivankristo.co.uk. It takes effect the day I read it, and you will not hear from me again.