Skip to content
← Home
Legal

Privacy Policy

Last updated: 23 June 2026

This policy explains what data shezadalikhan.com ("this site", "I", "me") collects when you visit, how it is used, and your rights. It applies to all visitors regardless of location and is written to satisfy both the Digital Personal Data Protection Act 2023 (DPDPA) — India's data protection law — and the EU General Data Protection Regulation (GDPR).

1. Who is the data controller?

Shezad Ali Khan
704, A Wing, Crystal Park CHS Ltd, 134, Swami Vivekananda Rd,
Shastri Nagar, Jogeshwari West, Mumbai, Maharashtra 400102, India
Email: shezadalikhan@gmail.com

2. What data is collected and why

Contact form

When you submit the contact form I collect your name, email address, and message, and optionally your company name, budget range, and the services you are interested in. This data is transmitted via Cloudflare Email Routing to my inbox and is not stored in any database. I use it solely to respond to your enquiry. The legal basis is legitimate interest (responding to an inbound request you initiated).

Analytics

If you accept cookies, this site loads Google Analytics 4 (GA4) and Google Tag Manager (GTM). These collect anonymised data about page views, referral sources, approximate geographic location (city level), device type, and on-site events (e.g. clicks, form submissions). This data is associated with a random GA client ID stored in your browser. No personally identifiable information is sent to Google.

If you decline cookies, or if you have not yet responded to the cookie banner, no analytics scripts are loaded.

Legal basis: consent. You can withdraw consent at any time via the cookie settings link in the footer.

Cookies and local storage

NamePurposeDuration
sak_cookie_consentStores your cookie preference (accepted / declined)Persists until cleared
themeStores your light / dark mode preferencePersists until cleared
_gaGoogle Analytics client ID (only if consent given)2 years
_ga_*Google Analytics session state (only if consent given)2 years

sak_cookie_consent and theme are stored in localStorage, not as HTTP cookies, so they are not sent to the server.

Server logs

Cloudflare (the hosting and CDN provider) automatically logs basic request metadata — IP address, HTTP method, URL, response status, and timestamp — for security and abuse prevention. These logs are held by Cloudflare under their own privacy policy and are not accessible to me in raw form.

3. How data is shared

I do not sell, rent, or trade your personal data. Data is shared only with the following processors:

4. Your rights

Under the DPDPA 2023 and GDPR you have the right to:

  • Access — request a copy of personal data I hold about you.
  • Correction — ask me to correct inaccurate data.
  • Erasure — ask me to delete your data where there is no overriding legal reason to keep it.
  • Withdraw consent — opt out of analytics at any time using the cookie settings link in the footer. This does not affect the lawfulness of processing before withdrawal.
  • Lodge a complaint — with the Data Protection Board of India (once operational) or your local supervisory authority if you are in the EEA.

To exercise any of these rights, email shezadalikhan@gmail.com with the subject line Privacy Request. I will respond within 30 days.

5. Data retention

Contact form submissions are delivered to my inbox and retained as email for as long as the correspondence is relevant, then deleted. No form data is stored in a separate database. Analytics data is retained in Google Analytics for 14 months (my configured retention setting), after which it is automatically deleted.

6. Children

This site is not directed at children under 13. I do not knowingly collect data from children under 13. Mentorship services are available to those 18 and over; applicants under 18 must have parental or guardian consent.

7. International transfers

If you are visiting from outside India, your data may be processed in the United States (by Cloudflare and Google) and other countries where their infrastructure is located. By using this site you acknowledge this transfer. Where required, Standard Contractual Clauses (SCCs) are in place via Google and Cloudflare's DPA agreements.

8. Changes to this policy

I may update this policy to reflect changes in law or my practices. The "Last updated" date at the top of this page will change. Continued use of the site after an update constitutes acceptance of the revised policy.

9. Contact

For any privacy-related questions: shezadalikhan@gmail.com

Terms of Service → Contact →