Privacy Policy

Last updated: August 2026

Who we are

This website, thimoth.com, is operated by Thimoth Rajapathma, based in London, United Kingdom. For data protection purposes, Thimoth Rajapathma is the data controller for personal data submitted through this site.

Commercial and project enquiries directed to CacheStack are handled separately, on CacheStack's own website and under CacheStack's own privacy policy. See cachestack.co.uk for that policy once you leave this site.

What data we collect

We collect personal data only when you choose to give it to us, through:

• The contact form: your name, email address, the subject you select, and the message you write.
• Aria, the chat assistant: if you choose to share it, your name, email address, company and role, plus the content of your conversation with Aria.

We do not collect payment details, government ID, or other special category data through this site, and we do not ask for more than we need to respond to you.

How we use your data

We use the information you provide solely to respond to your enquiry, understand what you are looking for, and, where relevant, direct you to the right place (CacheStack for commercial work, or a direct reply from Thimoth for everything else).

The legal basis for this processing is your consent, given by submitting the form or starting a conversation, and our legitimate interest in responding to enquiries sent to us.

Third parties who process your data

We use a small number of third-party services to run this site:

• Resend, to deliver enquiry emails from this site to our inbox.
• OpenRouter, to power Aria's conversational responses. If you chat with Aria, the content of that conversation is sent to OpenRouter's API to generate a reply. This involves processing outside the UK/EEA.

We do not sell your data, and we do not share it with third parties for their own marketing purposes.

How long we keep your data

Enquiries submitted through the contact form or Aria are sent to us by email and kept for as long as needed to respond to you and maintain reasonable business records, in line with standard correspondence retention practice. We do not store chat transcripts in a database on this site beyond that email.

Cookies

This website does not use analytics, advertising or tracking cookies. The only cookie set anywhere on this domain is a strictly necessary authentication cookie used by our internal admin and client portal area, which is not accessible to general visitors and plays no role in tracking you as a visitor to the public site.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data
• Restrict or object to our processing of your data
• Request a copy of your data in a portable format
• Complain to the Information Commissioner's Office (ICO) if you believe your data has been mishandled

To exercise any of these rights, email hello@thimoth.com.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected on this page with an updated date above.

Contact

Questions about this policy or how your data is handled: email hello@thimoth.com.