Skip to content
Back
UPDATED 20 SEPTEMBER 2026

PRIVACY
NOTICE.

Short version: the contact form emails me what you type, nothing else is collected, nothing is tracked, and you can have it deleted by asking.

Who is responsible

This site is mine personally — not a company's. I decide what happens to anything you send through it, which makes me the data controller for it. No employer or client has access to it.

For anything in this notice, including a deletion request, email khan.malikfouzan@gmail.com.

What the contact form collects

Only what you type into it: your name, your email address, an optional company or role, your message, and which of the three enquiry types you picked.

There is no account, no newsletter, and no profile built from any of it. Nothing is sold or shared for advertising, ever.

Why, and on what basis

To read your message and reply to it. That is the only purpose.

Under the GDPR the basis is legitimate interest — you contacted me expecting an answer, and answering requires keeping your message long enough to do so. Where the enquiry is about possible work, it is also a step taken at your request before any agreement.

Where it goes

Your message becomes an email in my personal inbox. Four services touch it on the way, none of which sees it for their own purposes:

Resend delivers the email.
Google hosts the inbox it lands in.
Cloudflare Turnstile runs the anti-spam check on the form. This is the one thing that happens before you press send: your IP address is passed to Cloudflare so it can judge whether the submission is automated. It is used for that check and nothing else — it is never stored by me and never appears in the email.
Vercel serves the site, and like any web server its access logs record IP addresses of visitors.

How long it is kept

If our exchange doesn't lead to work, I delete the enquiry within 24 months of our last message.

If it does lead to work, the correspondence becomes part of that project's record, and I keep it for as long as I need it for the engagement and for any related legal or accounting obligations.

You don't have to wait for either. Ask me to delete your message and I will, without needing a reason.

Cookies and local storage

This site sets no cookies of its own, and there is no analytics of any kind — no page-view tracking, no advertising pixels, no session recording, no third-party scripts beyond the anti-spam check described above.

One thing is stored in your browser: your light or dark theme choice, kept in localStorage so the site doesn't forget it. It is written only when you click the toggle, it never leaves your device, and I cannot read it. Clearing your browser data removes it.

The fonts are served from this site rather than from Google, so loading a page sends nothing to a font provider.

Your rights

You can ask me for a copy of what I hold about you, to correct it, to delete it, or to stop using it. If you are in the UK, EU or India, the law gives you those rights explicitly; I will honour them wherever you are.

One email to khan.malikfouzan@gmail.com is enough — no form, no proof of identity beyond writing from the address you contacted me on. I will action it within 30 days, and in practice much sooner. If you are in the EU or UK and think I have handled it badly, you can complain to your national data protection authority.