Home / Privacy Policy

Privacy Policy

Last updated: 13 June 2026

1. Who I Am

This website is operated by Yusuf Shah, a freelance web developer and IT support professional based in London, United Kingdom. The website address is https://shah.ovh.

I am committed to protecting your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data controller: Yusuf Shah
Data protection queries can be raised via the contact page.

2. What Data I Collect

I may collect and process the following personal data:

  • Contact details: Name, email address, and phone number — when you submit a contact form or make an enquiry.
  • Technical data: IP address, browser type, operating system, and referring URLs — collected automatically through server logs.
  • Cookies: See my Cookie Policy for full details.

I do not collect special category data (e.g. health, race, political opinions).

3. How I Use Your Data

I process your personal data under the following lawful bases:

  • Contract: To respond to your enquiries and deliver the services you request.
  • Legitimate interest: To maintain and improve this website and my services.
  • Legal obligation: To comply with tax, accounting, and regulatory requirements.
  • Consent: Where you have opted in to analytics cookies (see Cookie Policy).

4. Data Retention

I retain personal data only for as long as necessary:

  • Contact form enquiries: up to 12 months.
  • Client project data: duration of the working relationship plus 6 years (as required for tax/accounting records).
  • Server logs: up to 90 days.

5. Data Sharing

I do not sell, trade, or rent your personal data. I may share data only with:

  • Hosting provider: Processes data on my behalf for website hosting.
  • Email service (Fluent SMTP): Used to deliver contact form emails reliably.
  • HMRC / accountants: As required for tax and accounting compliance.

All third-party processors are required to handle your data securely and in compliance with UK GDPR.

6. International Transfers

Your data is stored on servers within the United Kingdom. If any data is transferred outside the UK, I ensure appropriate safeguards are in place (e.g. UK adequacy decisions or standard contractual clauses).

7. Your Rights

Under UK GDPR, you have the right to:

  • Access — request a copy of the personal data I hold about you.
  • Rectification — request correction of inaccurate data.
  • Erasure — request deletion of your data ("right to be forgotten").
  • Restriction — request that I limit how I process your data.
  • Objection — object to my processing of your data.
  • Portability — request transfer of your data in a machine-readable format.
  • Withdraw consent — withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, please contact me via the contact page. I will respond within one calendar month.

8. Right to Complain

If you are unhappy with how I handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

9. Third-Party Links

This website may contain links to external websites. I am not responsible for the privacy practices of those sites.

10. Changes to This Policy

I may update this policy from time to time. Changes will be posted on this page with an updated revision date.

11. Contact

For any questions about this privacy policy, please contact me via the contact page.