Last updated: 19 August 2026
The short version
This website sets no cookies, runs no third-party scripts, and sends no data to advertising networks. There is no Google Analytics, no Facebook pixel, no chat widget, no embedded fonts from a CDN. That is why you are not being asked to accept anything.
The only personal data I hold about you is what you choose to type into the contact form, or what you send me by email or WhatsApp.
Who is responsible
Anas Bin Masud, Islamabad, Pakistan. For any privacy question, email anasrajpoot766@gmail.com. I reply within one business day.
What I collect, and why
| Data | Why | Lawful basis | Kept for |
|---|---|---|---|
| Name, email, company, country | To reply to your enquiry | Legitimate interest / steps prior to a contract | 24 months |
| Project details, budget, timeline | To scope and quote accurately | Steps prior to a contract | 24 months |
| Server access logs (IP, user agent) | Security and abuse prevention | Legitimate interest | Per host retention, typically 30 days |
| Client project data (during an engagement) | To deliver the work you hired me for | Contract | Duration of engagement + 12 months |
What I do not do
- I do not sell, rent or share your data with anyone for marketing
- I do not run behavioural advertising or tracking of any kind
- I do not add you to a mailing list because you sent an enquiry
- I do not use automated decision-making or profiling
Analytics
If analytics are enabled on this site in future, they will be cookieless and privacy-preserving — the current intention is Cloudflare Web Analytics, which sets no cookies, collects no personal data and does not fingerprint visitors. This page will be updated before any such change goes live.
Who else processes your data
Only the small number of suppliers needed to run the site and reply to you. The full list, with what each one does and where it is located, is on the sub-processors page.
International transfer
I am based in Pakistan. If you are in the UK or the EEA, sending me your details is a restricted international transfer under UK GDPR or EU GDPR, because Pakistan does not have an adequacy decision.
For a simple enquiry, the transfer is necessary to take steps at your request prior to entering a contract. For an actual client engagement, I provide a Data Processing Agreement incorporating the UK International Data Transfer Addendum or EU Standard Contractual Clauses, signed before work begins.
Your rights
If UK or EU GDPR applies to you, you have the right to access your data, correct it, have it deleted, restrict or object to processing, and receive it in a portable format. Email anasrajpoot766@gmail.com and I will action it within 30 days at no charge.
You also have the right to complain to a supervisory authority — the ICO in the UK, or your national data protection authority in the EEA.
Security
The measures I actually take are listed on the security page rather than summarised vaguely here.
Changes
Any material change gets a new date at the top of this page. I do not quietly revise privacy policies.