Last updated: 7 August 2026
TomRaftery.com is operated by Tom Raftery. If you have a question about this policy or the personal information held about you, contact me at tom@tomraftery.com.
Information collected
Forms and enquiries
If you contact me through the website, I collect the information you provide, such as your name, organisation, email address and message. I use it to respond to your enquiry and manage any resulting correspondence.
Resilience scorecard requests
If you request the Resilient Supply Chain scorecard, I collect your name, company, job title, email address and stated podcast-listening frequency.
I use this information to:
- Send and support delivery of the scorecard
- Analyse, in aggregate, the professional profile of people discovering the Resilient Supply Chain podcast
- Improve the podcast and its resources
Requesting the scorecard does not add you to a newsletter or marketing list. Your information is not sold or used to make automated decisions about you.
Newsletter subscriptions
If you subscribe to a newsletter, the information you provide is used to send the emails you requested and manage your subscription. You can unsubscribe using the link included in every newsletter email.
Comments
If you leave a comment, the site collects the information entered in the comment form, together with technical information such as your IP address and browser details for spam detection. Approved comments and the name you provide may be visible publicly.
If you use Gravatar, an anonymised version of your email address may be sent to that service to retrieve your profile image. Gravatar is operated by Automattic and is covered by Automattic’s Privacy Policy.
Website use, cookies and embedded content
The website and its service providers may collect limited technical information—including IP address, browser type, device information, visited pages and cookie identifiers—for security, operation and audience measurement.
Pages may contain content embedded from services such as YouTube, podcast players or social platforms. Those services may collect information about your interaction with the embedded content under their own privacy policies.
Why the information is processed
Depending on the circumstances, information is processed:
- To provide something you requested or respond to your enquiry
- With your consent, where consent is requested
- For legitimate interests in operating, protecting and improving the website, podcasts and associated resources
- Where necessary to comply with a legal obligation
Service providers and international transfers
Personal information may be processed by companies providing website hosting, form processing, email delivery, analytics and spam protection. These providers receive only the information needed to perform their services.
Some providers may process information outside the European Economic Area. Where applicable, transfers are handled using recognised legal safeguards.
I do not sell personal information.
Retention
Information is kept only for as long as reasonably required for its purpose:
- Identifiable resilience-scorecard requests are normally retained for no more than 12 months
- General enquiries and related correspondence are normally retained for no more than 24 months, unless an ongoing relationship or legal reason requires longer
- Comments may remain published while the relevant page or article remains available
- Newsletter information is retained until you unsubscribe or request deletion
- Security and technical records are retained according to operational and legal requirements
Anonymised statistics that can no longer identify an individual may be retained for longer.
Your rights
Subject to applicable law, you may ask to:
- Access the personal information held about you
- Correct inaccurate or incomplete information
- Delete your information
- Restrict or object to its processing
- Receive certain information in a portable format
- Withdraw consent where processing is based on consent
To exercise these rights, email tom@tomraftery.com.
You may also lodge a complaint with your local data-protection authority. In Spain, this is the Agencia Española de Protección de Datos.
Changes to this policy
This policy may be updated when the website, its services or legal requirements change. The latest version will always appear on this page.