Privacy Policy

This site is a personal portfolio run by Ahsan Nawaz, a freelance web developer based in Pakistan. It collects as little as possible: there is no analytics script, no advertising, no tracking cookies and no newsletter. The only personal data reaching me is what you type into the contact form.

What is collected

Contact form

When you send a message, the form stores your name, email address, subject, the message itself and an optional budget range. Your IP address is recorded alongside it, which is used only to block automated spam.

This information is used to reply to you and, if we work together, to carry out the project. It is never sold, rented or shared with anyone for marketing.

Session cookie

The site sets one functional cookie. Laravel uses it to keep your form session valid and to protect the form against cross-site request forgery. It carries no identifying information and is not used to track you across other sites.

There is no Google Analytics, no Meta pixel and no third-party advertising or tracking script on this site.

Server logs

The hosting provider keeps standard web server logs — IP address, requested URL, timestamp and browser user agent. These are generated automatically by the server, are used for security and diagnostics, and are subject to the host's own retention policy.

Why it is collected

• To reply to you. Without an email address I cannot answer your enquiry.
• To deliver work. If you become a client, your contact details are needed to run the project.
• To keep the site secure. IP addresses and logs are what make blocking abuse possible.

Where the law requires a legal basis, that basis is your consent when you submit the form, and legitimate interest for security logging.

How long it is kept

Enquiries are kept for as long as they are useful — typically up to two years — so I can refer back to earlier conversations. Project-related correspondence may be kept longer where it forms part of a business record. You can ask for your message to be deleted at any time and it will be removed within 30 days.

Who else sees it

No one, other than the service providers needed to run the site:

• The hosting provider, which stores the database and serves the pages.
• Email delivery, used to notify me that a message arrived.

These providers process data on my behalf and cannot use it for their own purposes. Nothing is passed to advertisers or data brokers.

Your rights

You can ask me to:

• tell you what data I hold about you
• correct anything inaccurate
• delete your data entirely
• stop using it for any particular purpose

Email ahsannawaz.ahsanai@gmail.com and it will be handled within 30 days. No account or form is required — a plain email is enough.

Security

The site runs over HTTPS, form submissions are validated and protected against CSRF, and the administration area sits behind authentication. No system is perfect, so please do not send passwords, card numbers or other sensitive credentials through the contact form.

Children

This site offers professional services and is not directed at children under 16. I do not knowingly collect their data. If you believe a child has sent information through the form, contact me and it will be deleted.

Links to other sites

Some pages link out to GitHub, LinkedIn and similar platforms. Once you follow such a link you are on their service, under their privacy policy, not this one.

Changes

If what the site does changes — adding analytics, for example — this page is updated and the date at the top changes with it. The policy is written to describe what actually happens rather than to cover every hypothetical.

Contact

Questions about this policy: ahsannawaz.ahsanai@gmail.com.