Privacy notice

Who is responsible for your information

I, Haroon Rashidi, based in London, United Kingdom, run this site as an individual and am the data controller for it. That means I decide what is collected here and why, and I am accountable for it under the UK GDPR and the Data Protection Act 2018.

For anything in this notice — a question, a request, a complaint — write to hello@haroonrashidi.com. There is no separate data protection officer; messages come straight to me.

What this site collects

When you use the contact form

The form asks for some or all of the following, depending on which edition of the site you are viewing:

• your name;
• your email address, if you give one;
• your organisation, if you give one;
• the topic or subject you pick;
• the message you write.

Only the name and message are needed to send anything. Everything else is optional — though without an email address I have no way to reply. Please do not put sensitive personal information (health, beliefs, anything confidential) into the form; it is an ordinary email channel.

The form also contains one hidden field that real people never see. If it is filled in, the message is treated as automated spam and discarded rather than delivered. Nothing about you is stored in the process.

When you simply read the site

Like every website, this one is served by a hosting provider that keeps short-lived server logs: the IP address that made the request, the page requested, the time, and the browser’s user agent string. Those logs exist so the host can serve pages, spot abuse and keep the service up. I do not use them to build any picture of you, and I do not combine them with anything else.

The contact form also counts recent submissions per IP address in the server’s memory, so one sender cannot flood the inbox. That count is not written to disk and disappears when the server restarts.

Why, and on what legal basis

• To reply to you. The lawful basis is Article 6(1)(f) UK GDPR — my legitimate interest in answering people who deliberately write to me, which is also what you expect when you press send. If your message is about a role or a piece of work, replying is also a step taken at your request before any agreement, under Article 6(1)(b).
• To keep the site working and free of abuse. Server logs and the rate limit rest on Article 6(1)(f) — the legitimate interest in running a secure, available website.

There is no profiling and no automated decision-making. Nothing you send is used for marketing, and nothing is ever sold or shared for anyone else’s advertising.

Where your message goes

When you submit the form, the site’s own server passes the message to Resend (Resend Inc., United States), the email delivery service, which sends it on to my mailbox. Resend processes it on my instructions as a processor; it does not use your message for its own purposes. After that the message lives in my email account like any other email.

If the email service is unavailable or not yet configured, the site falls back to opening a pre-filled message in your own email program. In that case nothing is sent anywhere until you choose to send it yourself, and your message never touches this server.

No one else receives your information. There are no advertising networks, no analytics companies, no CRM and no mailing list behind this site.

International transfers

Resend (Resend Inc., United States)is a US company, so your message may be processed on servers outside the United Kingdom. Where that happens, the transfer is covered by the provider’s standard data protection terms — the UK International Data Transfer Addendum to the EU Standard Contractual Clauses — which are designed to keep your information protected to a UK standard. My own mailbox is likewise provided by a mainstream email host that may store mail outside the UK on the same footing.

How long it is kept

Enquiries are kept for up to 12 months and then deleted, so that I can pick up a conversation that goes quiet and come back to it. If we end up working together, I keep the correspondence only for as long as it stays relevant to that work.

Hosting logs are kept for the short period the hosting provider sets, typically a matter of days or weeks. You can ask me to delete your enquiry sooner at any time.

Cookies, storage and analytics

This site sets no cookies. There is no analytics, no tag manager, no pixel, no advertising script and no third-party embed that could set one. That is also why you are not being asked to accept anything.

It does store one item in your browser’s local storage: hr-theme, which remembers which visual edition of the site you chose so you land back in it next time. It holds nothing but that choice, it is never transmitted anywhere, and I cannot read it. Under the Privacy and Electronic Communications Regulations it is strictly necessary for a service you explicitly asked for, so it does not need consent. Clearing your site data in the browser removes it, and you will simply be asked to pick an edition again.

Your rights

Under the UK GDPR you can ask me to:

• give you access to the personal information I hold about you, and a copy of it;
• correct anything inaccurate or incomplete;
• erase it, where there is no good reason for me to keep it;
• restrict how I use it while a query about it is sorted out;
• object to my using it on the basis of legitimate interests;
• port it — receive it in a common machine-readable format, or have it sent to someone else.

Email hello@haroonrashidi.com and I will respond within one month. Exercising any of these rights is free, and I will not treat you differently for it.

Complaints

If you think I have handled your information badly, please tell me first — it is usually the fastest way to fix it. You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.

Changes to this notice

If the site starts doing something new with your information — a different email provider, a booking tool, anything at all — this notice is updated before that change goes live, and the date at the top changes with it. There is no archive of older versions; ask me if you need one.

Site owner

Name

Haroon Rashidi

Location

London, United Kingdom

Email

hello@haroonrashidi.com

This is a personal site run by an individual, not a company, so there is no company number or registered office to publish.