Privacy and cookie policy

Who is responsible for your data

This website is run by Jalal Shamim, who is the data controller for personal data collected through it. For any privacy question or request, email jalalshamimofficial@gmail.com.

What I collect and why

When you send an enquiry

The contact forms ask for your name, email address and message, and optionally your WhatsApp number and the service you are interested in. I use these details only to reply to you, discuss your project and, if you ask, prepare a proposal.

The lawful basis is taking steps at your request before entering into a contract (Article 6(1)(b) of the GDPR and UK GDPR) and, for general questions, my legitimate interest in replying to people who contact me (Article 6(1)(f)). I will not add you to a mailing list or pass your details to anyone for marketing.

When you browse the site

If you accept analytics cookies, Google Analytics 4 collects information about how the site is used, such as pages visited, approximate location, device and browser. This helps me understand which content is useful. It is only switched on with your consent (Article 6(1)(a)), and you can withdraw consent at any time using the "Cookie settings" link in the footer.

The web server also keeps short-lived technical logs (such as IP address and pages requested) to keep the site secure and working.

Who your data is shared with

• Website hosting provider, which stores the website and the enquiry database.
• Google, which provides the email account enquiry notifications are sent to and, if you accept analytics cookies, Google Analytics.

Some of these providers process data in more than one country, including the United States. Where data protection law requires it, transfers rely on adequacy decisions (including the EU–US Data Privacy Framework and its UK Extension) or other approved safeguards.

I do not sell or share your personal information for advertising, as those terms are used in US state privacy laws such as the California Consumer Privacy Act.

How long data is kept

• Enquiries are kept for up to 24 months after our last contact, then deleted, unless we go on to work together.
• Client records are kept for as long as needed to deliver the work and meet legal and accounting obligations.
• Google Analytics data is kept for the retention period set in Google Analytics, and no longer than 14 months.

Your rights

Depending on where you live, data protection laws such as the GDPR (EU), the UK GDPR, the CCPA (California) and Canadian and Australian privacy laws give you rights over your data. I apply the following to everyone, wherever you are. You can:

• ask for a copy of the personal data I hold about you
• ask for inaccurate data to be corrected
• ask for your data to be deleted
• object to, or ask me to restrict, how your data is used
• withdraw consent at any time, where processing is based on consent
• ask for your data in a portable format
• use these rights without being treated differently for doing so

To use any of these rights, email me. I will respond within one month. If you are unhappy with how your data has been handled, you can complain to the data protection authority where you live, for example the Information Commissioner's Office in the UK (ico.org.uk), the Office of the Privacy Commissioner of Canada or the Office of the Australian Information Commissioner.

Cookies

Cookies are small files stored on your device. This site uses:

Your cookie choice itself is remembered in your browser's local storage so the banner does not reappear on every page. You can change your choice at any time with the "Cookie settings" link at the bottom of every page, or by clearing cookies in your browser.

Security

The website uses an encrypted (HTTPS) connection, the admin area is password-protected with rate-limited sign-in, and access to enquiry data is limited to me.

Changes to this policy

If this policy changes, the new version will be published on this page with an updated date at the top.