Privacy Policy

Who We Are & What This Policy Covers

This Privacy Policy describes how Shan Mohammad ("I", "me", or "my") collects, uses, and protects information about you when you visit my website, use my services, or communicate with me.

By accessing or using my services, you agree to the practices described in this policy. If you do not agree with any part of this policy, please do not use my services.

Information We Collect

I collect information in the following ways:

Information you provide directly:

• Name and email address when you fill out a contact form or subscribe
• Business name, website URL, and project details when you inquire about services
• Messages, feedback, and communication you send to me
• Billing and payment details when you engage my services (processed via secure third-party payment processors)

Information collected automatically:

• IP address and approximate geographic location
• Browser type, operating system, and device information
• Pages visited, time spent, and referring URLs
• Interaction data such as clicks, scroll depth, and session duration

How We Use Your Information

I use the information collected solely for legitimate purposes, including:

• Responding to enquiries and providing requested services
• Delivering and improving the quality of my work for you
• Sending relevant updates, project status communications, and invoices
• Analysing website usage to improve content and user experience
• Complying with legal obligations
• Protecting against fraud, abuse, or security threats

I do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects on you.

Sharing of Information

I do not sell, rent, or trade your personal information to third parties. I may share your data only in the following limited circumstances:

• Service providers: Trusted tools I use to deliver services (e.g., email platforms, payment processors, analytics tools) — bound by confidentiality agreements
• Legal requirements: When required by law, court order, or governmental authority
• Business transfers: In the unlikely event of a business transfer or acquisition, your data may be included with appropriate protections
• With your consent: Any other sharing only with your explicit permission

Cookies & Tracking Technologies

My website uses cookies and similar technologies to improve functionality and understand how visitors use the site. Cookies are small text files stored on your device.

Types of cookies used:

• Strictly necessary: Required for the site to function (e.g., session management)
• Analytics: Help me understand page performance and visitor behaviour (e.g., Google Analytics)
• Preference: Remember your settings and choices for a better experience

You can control cookie settings through your browser preferences. Disabling certain cookies may limit some features of the site.

Third-Party Services

I use a number of third-party tools and platforms to operate my website and deliver services. These services have their own privacy policies and data handling practices:

• Google Analytics — website traffic analysis
• Google Search Console — search performance monitoring
• Stripe / payment processors — secure payment handling
• Email service providers — communication delivery

I encourage you to review the privacy policies of any third-party services you interact with through my site.

Data Retention

I retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.

• Client project records are retained for up to 5 years after project completion for accounting and legal purposes
• Contact form submissions are retained for up to 2 years unless a working relationship is established
• Analytics data is retained in aggregate, anonymised form indefinitely

When data is no longer needed, it is securely deleted or anonymised.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data I hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request that I limit how I process your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact me using the details in the Contact section below. I will respond within 30 days.

Security

I take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

These measures include encrypted connections (HTTPS), access controls, and regular reviews of data handling practices. However, no method of transmission over the internet is 100% secure, and I cannot guarantee absolute security.

If you become aware of any security vulnerability or breach, please notify me immediately.

Children's Privacy

My services are not directed to individuals under the age of 16. I do not knowingly collect personal information from children. If you believe a child has provided me with personal data, please contact me and I will promptly delete it.

Changes to This Policy

I may update this Privacy Policy from time to time to reflect changes in my practices, technology, or legal requirements. The "Last updated" date at the top of this page will always reflect the most recent revision.

For material changes, I will make reasonable efforts to notify you — such as through a notice on my website or via email where appropriate. Continued use of my services after changes constitutes acceptance of the updated policy.

Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please get in touch: