This site is operated by Abdul Razzaq (the "Site Owner"), a freelance Shopify developer based in Lahore, Pakistan. This Privacy Policy explains what data is collected when you visit devabdulrazzaq.com, what it is used for, and the rights you have over it.
1. Data I collect
I collect only what's needed to respond to enquiries and operate the site:
- Contact form submissions — name, email address, and the message you send via the contact page. Used only to reply to your enquiry.
- Lead magnet requests — if you request the Shopify checklist, your email address is stored so the unique access link can be sent and so I can track if the resource is being opened (this helps me understand which content is useful).
- Analytics data — anonymised behaviour data (pages visited, referring site, approximate location, device type) collected via Google Analytics 4.
- Server logs — standard web-server logs including IP address and user agent, retained for up to 30 days for security and debugging purposes.
2. Third-party services
To operate this site I use the following third-party services. Each has its own privacy policy:
- Google Analytics 4 — anonymised site analytics
- Google reCAPTCHA v3 — bot prevention on the contact form
- Calendly — meeting booking; collects your name, email, and meeting time when you book a call
- Notion — used as a CRM to store lead enquiries (the same name/email/message you submitted via the contact form)
3. How I use your data
- To respond to your enquiry or project request
- To send you the resource you explicitly requested (e.g. the Shopify checklist)
- To improve the site by understanding which pages and content are most useful
- To prevent abuse of contact forms and other interactive features
I do not sell your data, share it with advertisers, or send unsolicited marketing emails. If we end up working together, any client-specific data will be governed by the project agreement between us, not by this policy.
4. Cookies
This site uses a small number of cookies:
- Analytics cookies set by Google Analytics 4 — anonymised
- reCAPTCHA cookies set by Google when you submit a form
- Theme preference cookie — remembers your light/dark mode choice
You can disable cookies in your browser settings. The site will still work; analytics will simply not record your visit.
5. Data retention
- Contact form submissions are retained as long as we are in active conversation, then for a further 12 months for record-keeping.
- Lead magnet email addresses are retained until you request deletion.
- Analytics data is retained for 14 months in Google Analytics, after which it is automatically deleted.
- Server logs are retained for 30 days.
6. Your rights
Under GDPR (EU/UK) and similar regulations, you have the right to:
- Request a copy of the personal data I hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent for any optional data processing
- Object to processing
To exercise any of these rights, email [email protected]. I will respond within 30 days.
7. Security
The site is served over HTTPS with HSTS enforced. The contact form uses reCAPTCHA v3 to filter bots. Lead-magnet access links use cryptographically random tokens. I do not store payment information on this site — invoicing is handled separately via Stripe, Wise, or Upwork/Fiverr depending on engagement.
8. Children
This site is intended for business audiences. I do not knowingly collect data from anyone under 16.
9. Changes to this policy
If this policy changes substantially I will update the "Last updated" date at the top of this page. Material changes (e.g. introduction of a new third-party service) will be noted prominently.
10. Contact
Questions about this policy or how your data is handled: [email protected]