1. Who I am
This website is operated by Ijaz Khan, an independent software developer. For applicable privacy laws, I am the controller of personal information collected directly through this website.
Privacy questions and requests can be sent to ijaz@ijazkhan.com.
2. Information I collect
Information you provide
- Contact inquiries: name, email, optional phone number, company, budget, service interest, subject and message.
- Newsletter: email address, optional name, subscription status and confirmation/unsubscribe tokens.
- Portfolio chat: the messages you submit, conversation context needed to answer, and any contact draft you ask the chat to prepare.
- Direct communication: information included in emails or subsequent project discussions.
Information collected automatically
Optional first-party analytics runs only after you allow analytics cookies. It may record:
- a salted, shortened hash of your IP address rather than the raw IP;
- country and city supplied by the hosting platform;
- browser, device category, truncated user agent, referring page and pages visited;
- a random 30-day analytics session identifier.
Technical request information may also be processed by the hosting provider for delivery, security, debugging and abuse prevention even when optional analytics is rejected.
3. How I use information
- respond to inquiries and assess potential projects, employment or collaboration;
- deliver requested newsletter messages and manage confirmations or unsubscribes;
- answer portfolio questions and prepare contact drafts requested through the chat;
- operate, secure, troubleshoot and improve the website;
- understand aggregate site usage when analytics has been allowed;
- prevent spam, fraud, abuse and unauthorized access;
- comply with legal obligations and establish or defend legal claims.
I do not sell personal information and do not use it for third-party behavioural advertising.
4. Legal bases
Where laws such as the UK GDPR or EU GDPR apply, processing relies on:
- Steps at your request or contract: responding to a project inquiry and taking steps toward an engagement.
- Consent: newsletter subscriptions and optional analytics. Consent can be withdrawn at any time.
- Legitimate interests: operating and securing this portfolio, preventing abuse, answering ordinary communications and improving services in ways reasonably expected by visitors.
- Legal obligations: recordkeeping or disclosures required by applicable law.
5. AI portfolio chat
Chat messages are sent to Google Gemini to generate an answer. Relevant published portfolio excerpts retrieved from the site database may be included with your question.
I do not store full chat transcripts in my analytics database. I keep limited operational events such as a hashed session reference, provider/model, response duration, source count, tool names and success or error status. If you explicitly confirm a contact draft, its contact details become a normal inquiry record.
Do not put passwords, credentials, financial information, health information, confidential business data or other sensitive personal information into the chat.
Provider handling depends on the account tier. Google states that content submitted through unpaid Gemini services may be used to improve its products and may be reviewed by humans; paid-service handling differs. See the Gemini API Additional Terms.
6. Service providers and recipients
I use providers only where needed to operate the site:
- Vercel — hosting, content delivery and request processing.
- Supabase — PostgreSQL database, vector storage and uploaded media.
- Resend — contact notifications, replies and newsletter email delivery.
- Google — Gemini AI/embeddings and, only with consent when configured, Google Analytics.
Information may also be disclosed where required by law, to protect rights or security, or in connection with a legitimate business transfer. I do not permit providers to use contact information for their own marketing on my behalf.
8. How long information is kept
- Inquiries: for as long as needed to respond, evaluate or perform an engagement, maintain reasonable business records, resolve disputes and meet legal obligations.
- Newsletter: while subscribed. After unsubscribe, a minimal suppression record may be retained to honour the request and avoid sending further mail.
- Analytics and AI operational events: only while reasonably useful for security, reliability, trend analysis and troubleshooting, after which they may be deleted or aggregated.
- Consent preference: 180 days, unless changed or cleared earlier.
Retention may be extended where required by law or necessary for legal claims. You may request deletion at any time, subject to lawful exceptions.
9. Your privacy rights
Depending on where you live, you may have rights to:
- access or receive a copy of personal information;
- correct inaccurate or incomplete information;
- request deletion or restriction;
- object to processing based on legitimate interests;
- withdraw consent without affecting earlier lawful processing;
- request portability where applicable; and
- complain to your local data-protection authority.
Send requests to ijaz@ijazkhan.com. I may need enough information to verify the request and protect other people’s data. Newsletter consent can also be withdrawn using the unsubscribe link in each email.
10. International data transfers
The website is available internationally and providers may process information in countries other than yours, including the United States and regions selected for hosting or database infrastructure. Where required, transfers are handled through provider contractual safeguards or another legally recognized transfer mechanism.
11. Security
I use access controls, encrypted transport, server-side validation, hashed analytics identifiers, rate limiting, restricted administrator routes and reputable infrastructure providers. No online service can guarantee absolute security, so please avoid sending unnecessary sensitive data.
12. Children’s privacy
This professional portfolio is not directed to children under 16, and I do not knowingly collect their personal information. A parent or guardian who believes a child submitted information can contact me to request deletion.
13. Changes and contact
I may update this policy when the website, providers or legal requirements change. The effective date at the top will be revised, and material changes may receive additional notice on the site.
Questions: ijaz@ijazkhan.com.