This policy explains what personal data I collect through this website, why, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the rules made under it.
1. Who I am
Farhaz Ali, individual freelancer (sole proprietor, not a registered company), Karnal, Haryana, India.
Email: farhazali716@gmail.com · Phone/WhatsApp: +91 9991637414
For the purposes of the DPDP Act, I am the “Data Fiduciary” for the data described here. This site is a personal portfolio, not a company. It is my own website and is separate from my employment at Danlite Tools Technician.
2. Personal data I collect
Only what you type into the contact form: your name, email address, the service you pick and your message. Nothing else is required.
Please do not put sensitive details (health, financial or ID numbers) in your message.
This site has no accounts, no analytics, no advertising or tracking tools, and it sets no cookies.
The website and its backend do not store any personal data about visitors. Personal data reaches me only when you choose to contact me, for example by message or email, or on WhatsApp, LinkedIn or another platform.
3. How the contact form works
The form has no server of its own and stores nothing. When you tick the consent box and press a send button, your browser opens WhatsApp or your own email app with your message ready. The message is only sent when you press send there.
After that, it is handled by WhatsApp (Meta) or your email provider under their own privacy policies.
The same applies if you contact me directly on WhatsApp, email, LinkedIn or any other platform. I receive and keep that conversation there, and that platform’s own privacy policy also applies.
4. Why I use your data, and consent
I use your details only to reply to your enquiry and to discuss a possible project. My legal basis is your consent, which you give by ticking the consent box before sending. The consent request is written in plain language and is separate from these terms.
5. Third parties that see technical data
Each page loads fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Google receives your IP address and browser details when this happens, as with any web request. I do not use this to track you. See the Cookie Policy.
My web host may also keep standard server logs (such as IP address and time of visit) for security. I do not use them to identify you.
6. Sharing and transfers
I do not sell your data or share it for marketing. For larger projects I may involve two trusted collaborators (Smaran Bari, networking and cybersecurity, and Amul Yadav, UI/UX and backend development). I would share only what is needed for that work, and they would be asked to keep it confidential. Your message passes through WhatsApp, your email provider or the other platform you choose, which may process data on servers outside India. I may disclose data if the law requires it.
7. How long I keep data
Enquiries stay in my WhatsApp, email or other messaging platform only as long as needed to respond. If we work together, I keep them for the project and for legal record-keeping. Enquiries that do not lead to work are deleted within 12 months.
8. Your rights under the DPDP Act
You may ask me to:
- give you a summary of the personal data I hold about you;
- correct or update it;
- erase it;
- withdraw your consent at any time;
- nominate another person to exercise these rights if you die or become unable to.
Write to farhazali716@gmail.com. I will reply within a reasonable time and no later than 30 days.
9. Withdrawing consent
Email me with the subject “Withdraw consent”. Withdrawal does not affect anything done before it, and I will stop using your data and erase it unless the law requires me to keep it.
10. Grievance contact
Send complaints to Farhaz Ali at farhazali716@gmail.com. If I do not resolve your complaint, you may complain to the Data Protection Board of India.
11. Children
This site is for people aged 18 and over. Please do not submit the form if you are under 18. The DPDP Act requires verifiable parental consent for children’s data, and this site does not collect it.
12. Security and data breaches
The site is static and collects nothing itself. No method of transmission is perfectly secure, so I take reasonable care of messages you send me. If a breach affects your personal data, I will tell you and the authorities as the law requires.
13. Changes to this policy
I may update this policy. The “last updated” date above changes when I do.