Legal
Privacy Policy
This Privacy Policy explains how Ayan Rahman collects, uses, and protects your personal data in accordance with the GDPR.
Last updated:
1. Privacy Policy Overview
This Privacy Policy describes how we collect, use, and protect your personal data when you visit this website. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data We Collect
We collect the following types of data:
— Contact information: When you submit the contact form, we collect your name, email address, and any message content you provide.
— Usage data: We may collect anonymous analytics data such as pages visited, time spent on pages, and referring URLs. This data is aggregated and does not identify you personally.
— Authentication data: If you have an account, we store your email address and authentication tokens. Passwords are never stored in plain text.
— Cookies: We use cookies to remember your preferences, keep you logged in, and analyze traffic. See our cookie consent banner for details.
3. Legal Basis for Processing (GDPR)
Under the GDPR, we process your personal data based on the following legal grounds:
— Consent: You have given consent for the processing of your personal data (e.g., cookies, contact form submissions).
— Legitimate interest: Processing is necessary for the legitimate interests of operating and improving this website.
— Contract: Processing is necessary to provide services you have requested (e.g., account access).
4. How We Use Your Data
We use your data to:
— Respond to your inquiries submitted via the contact form.
— Provide and maintain the website and its features.
— Analyze usage patterns to improve user experience.
— Protect against fraud, unauthorized access, and other security threats.
We do not sell your personal data to third parties under any circumstances.
5. Data Retention
We retain your personal data only for as long as is necessary for the purposes set out in this policy, or as required by applicable law. Contact form submissions are retained for up to 12 months. Account data is retained for the duration of your account and deleted upon request.
6. Your Rights Under GDPR
Depending on your location, you may have the following rights regarding your personal data:
— The right to access: You can request a copy of the personal data we hold about you.
— The right to rectification: You can request that we correct inaccurate or incomplete data.
— The right to erasure ("right to be forgotten"): You can request that we delete your personal data.
— The right to restrict processing: You can request that we limit the processing of your data.
— The right to data portability: You can request a machine-readable copy of your data to transfer to another service.
— The right to object: You can object to our processing of your personal data.
— The right to withdraw consent: You can withdraw your consent at any time by clearing your cookies or contacting us.
To exercise any of these rights, please contact us via the contact page.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encrypted authentication, multi-factor authentication (MFA), session timeouts, and bot protection via CAPTCHA/Turnstile.
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.
9. Third-Party Services
This website may link to or integrate with third-party services (e.g., GitHub, LinkedIn, Google Analytics). These services have their own privacy policies governing how they collect and use your data. We are not responsible for the privacy practices of third-party services.
10. International Data Transfers
Your data may be processed in a country different from your own. By using this website, you consent to the transfer of your data to countries that may have different data protection standards. We take reasonable steps to ensure your data is protected in accordance with this policy.
11. Children's Privacy
This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.
13. Contact
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us via the contact page.