Privacy Policy
What this site collects, who else can see it, and how long it is kept.
I’m Dion Karlo Anthonee Capinpin. I run workwithDion, an SEO and digital marketing consultancy — one practitioner, no staff, no office.
If you want to know what I hold about you, or want it deleted, email [email protected] and I will sort it out.
Last updated: 27 September 2026.
The short version
- Analytics, so I can see which pages get read. Google Analytics, two cookies.
- Whatever you choose to type into the contact form.
- Ordinary server and security logs, which include your IP address.
- I don’t sell any of it, and there is no advertising or retargeting on this site.
Analytics
Google Analytics 4 runs on this site through the Site Kit plugin, under measurement ID G-31B99MGRY0.
It tells me which pages people read, roughly which country they are in, and whether they arrived from a search engine, a link or an AI assistant. It is aggregate. I cannot see who you are from it, and I don’t try to.
Two cookies do this: _ga and _ga_31B99MGRY0. They hold a randomly generated number that lets Google tell one browser from another, so that a second visit isn’t counted as a second person. They contain no name, email address or anything else you have given me.
Analytics is switched off for logged-in users, which in practice means me.
Google processes this data on its own terms, on its own servers. You can stop it with your browser’s tracking protection, any content blocker, or Google’s own opt-out add-on. Nothing on this site breaks if you do.
Cloudflare Web Analytics also runs here, alongside it: a small script that counts page views. It uses no cookies, and it doesn’t fingerprint visitors or follow them to other sites.
Search Console
Google Search Console shows me the search queries that led people here, and how often pages appeared and were clicked. Google reports it in aggregate and withholds rare queries precisely so individuals can’t be identified.
It sets no cookie and puts no script on the page. Google compiles it from its own search logs, not from your visit to this site.
Cloudflare
Cloudflare sits in front of this site and delivers it. Every request passes through Cloudflare, so it logs the usual request data, including your IP address, for security and abuse prevention.
Cloudflare itself sets no cookie on a normal visit. If it challenges a request that looks automated, it sets a short-lived cookie to remember that the challenge was passed.
The contact form
The form on the contact page asks for five things: your name, your email address, your domain, which market you are in, and what you want to tell me.
That is all it collects. It does not record your IP address, your browser, or the page you came from.
Each submission is stored in this site’s admin area and emailed to me. The email is sent through Hostinger’s mail servers. Nothing is added to a mailing list — I don’t run one — and filling in the form will not get you marketing.
I use it for one thing: replying to you.
Booking a call
The “book a call” buttons send you to Cal.com, a separate company with its own privacy policy. Whatever you enter there — your name, your email address, the time you choose — you are giving to Cal.com as well as to me. Cal.com is not embedded here, so nothing of theirs loads or runs on this site until you click through.
Hosting and server logs
The site is hosted by Hostinger. Their servers keep standard access logs, including IP addresses, for running the service and investigating faults. This is ordinary for any website, and it happens whether or not you interact with anything on the page.
What I don’t do
- I don’t sell your data, rent it, or hand it to data brokers. There is no arrangement of that kind and there never has been.
- I don’t run advertising, retargeting pixels or ad-platform conversion tracking. There is no Meta pixel, no LinkedIn insight tag, no Google Ads tag.
- I don’t build profiles of visitors or try to work out who anyone is from analytics.
- I don’t run a mailing list, so there is nothing to be added to and nothing to unsubscribe from.
How long things are kept
- Contact form enquiries. Kept until I delete them. There is no automatic expiry and I am not going to pretend otherwise: an enquiry sits in the site’s admin until I clear it out. Ask me to delete yours and I will, the same day.
- Analytics. Held by Google under this property’s data-retention setting, after which Google deletes the underlying event records.
- Cloudflare and server logs. Kept by Cloudflare and Hostinger under their own retention periods. These are short and are not mine to set.
Who else can see it
Nobody works for me, so nobody else reads your enquiry. I have never received a legal request to disclose anything about a visitor. If one ever arrived and the law required it, I would have to comply.
The companies that handle data on my behalf, because the site runs on their infrastructure, are:
| Company | What it handles |
|---|---|
| Analytics and Search Console | |
| Cloudflare | Delivering the site, security, cookieless page-view counts |
| Hostinger | Hosting, server logs, sending my email |
| Cal.com | Booking, and only if you click through to it |
Each of them has its own privacy policy.
Cookies, in full
Two cookies are set on a normal visit, both by Google Analytics.
| Cookie | Set by | Purpose | Expires |
|---|---|---|---|
_ga | Google Analytics | Tells one browser from another | 2 years |
_ga_31B99MGRY0 | Google Analytics | Holds the session state for this property | 2 years |
I checked this from a clean browser profile on 27 September 2026: loading a page stored those two and nothing else.
You can refuse or delete both at any time in your browser settings, and the site works the same without them. If Cloudflare challenges a request that looks automated it sets one short-lived cookie of its own, and if you log in to WordPress here, which means me, WordPress sets session cookies; no visitor receives those.
For completeness: WordPress stores one flag in your browser’s session storage noting whether your device can display emoji. It is not a cookie, it holds nothing about you, and it disappears when you close the tab.
Your choices and your rights
You can block the analytics cookies in your browser, with a content blocker, or with Google’s opt-out add-on. You can also use this site from start to finish without ever filling in the form.
Email me and I will tell you what I hold about you, correct it, or delete it. Depending on where you live you may have formal rights to exactly that — under the UK and EU GDPR, a right of access, correction, deletion, objection and portability; under California law, a right to know what is collected and to have it deleted, and a right to opt out of its sale, which is moot here because nothing is sold.
I will answer within thirty days, usually far sooner, and there is no charge. You don’t need to give a reason, and asking me to delete your data is not something I will take personally.
Children
This site sells a professional service to businesses. It is not aimed at children, and I don’t knowingly collect anything from anyone under 16.
Changes to this page
If what the site collects changes, I will change this page and update the date at the top. Anything material gets written here plainly rather than slipped in.
Contact
Questions about this page, requests to see or delete what I hold, or anything here you think is wrong: [email protected].