Privacy Policy

Last updated: June 25, 2026

1. Introduction

Welcome to kashifullah.com ("the Site"), operated by Kashif Ullah ("I", "me", "my"). I respect your privacy and am committed to protecting the personal information you share when visiting this website. This Privacy Policy explains what data I collect, why I collect it, how I use it, the third-party services involved, and your rights regarding that data.

By using the Site, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use the Site.

2. Who Operates This Site

This Site is operated by Kashif Ullah as a personal portfolio, blog, and freelance business. The data controller responsible for your personal information is:

Name: Kashif Ullah
Email: Kashifullah919@gmail.com
Website: https://kashifullah.com

3. Information I Collect

3.1 Information You Provide

When you use my contact form, I collect:

Name — to address you in my reply
Email address — to send my reply
Company name (optional) — to better understand context
Budget range (optional) — to assess project fit
Message content — the details of your enquiry
Consent confirmation — your acknowledgment that you have read this Privacy Policy

I do not require you to create an account or provide any information beyond what is needed to respond to your enquiry.

3.2 Automatically Collected Information

When you visit the Site, the following information may be collected automatically:

Server logs — IP address, browser type, operating system, referring URL, pages visited, date and time of access. Used solely for security and abuse prevention. Retained for up to 30 days.
Analytics data — anonymized page views, country of origin, browser type, and referring pages via Cloudflare Web Analytics, which is a privacy-first, cookie-free analytics service.

3.3 Cookies and Similar Technologies

This Site uses a small number of cookies and similar storage mechanisms. Full details are in my Cookie Policy. In summary:

Strictly necessary storage — to remember your cookie consent choice. This cannot be disabled.
Analytics — optional, off by default. Helps me understand site usage.
Advertising — optional, off by default. Allows Google AdSense and partners to display personalized advertisements.

4. Third-Party Advertising and Google AdSense

This Site may display advertisements served by Google AdSense, a service provided by Google LLC ("Google"). The following disclosures apply:

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to this Site and/or other sites on the Internet.
Users may opt out of personalized advertising by visiting Google Ads Settings.
Users may also opt out of some third-party vendors' use of cookies for personalized advertising by visiting www.aboutads.info or, for EU/UK visitors, www.youronlinechoices.com.

For a complete list of cookies and other technologies Google uses, see Google Cookie Types. For Google's privacy practices, see the Google Privacy Policy and How Google uses information from sites or apps that use its services.

5. How I Use Your Information

To respond to enquiries submitted through the contact form
To improve the website experience based on anonymized analytics
To display relevant advertisements through Google AdSense (only with your consent)
To detect, prevent, and respond to spam, abuse, or security incidents
To comply with legal obligations

I do not use your data for automated decision-making or profiling that produces legal effects on you.

6. Legal Basis for Processing (GDPR / UK GDPR)

For visitors in the European Economic Area, United Kingdom, and similar jurisdictions, the legal bases for processing your personal data are:

Consent — for analytics and advertising cookies (you can withdraw at any time via the Cookie preferences link in the footer).
Legitimate interest — for security logs and responding to your contact enquiries.
Performance of a contract — when discussing freelance services with you.
Legal obligation — when required by law.

7. Data Sharing and Disclosure

I do not sell, trade, or rent your personal information to third parties. Your data may be shared only in the following circumstances:

Cloudflare — provides hosting, CDN, security, and privacy-first analytics. Cloudflare Privacy Policy.
Resend — processes contact form submissions to deliver email to me. Resend Privacy Policy.
Google LLC — provides advertising via Google AdSense (only with your consent). Google Privacy Policy.
Legal requirements — I may disclose information if required by law, court order, or to protect against fraud or harm.

8. International Data Transfers

The service providers listed above operate globally, and your data may be processed in countries outside your country of residence, including the United States. Where required by law, these transfers are protected by appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

9. Data Retention

Contact form submissions — retained only as long as necessary to respond to your enquiry and maintain business records, typically no longer than 24 months.
Server logs — retained for up to 30 days for security purposes.
Analytics data — anonymized and aggregated; no individual user data is stored long term.
Cookie consent records — stored locally on your device until you clear them.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access — request a copy of the personal data I hold about you
Rectification — request correction of inaccurate data
Erasure — request deletion of your data ("right to be forgotten")
Restriction — request that I limit how I process your data
Portability — request a machine-readable copy of your data
Objection — object to processing based on legitimate interests
Withdraw consent — at any time, where processing is based on consent
Lodge a complaint — with your local data protection authority

To exercise any of these rights, please contact me at Kashifullah919@gmail.com. I will respond within 30 days.

11. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information is collected, request deletion of personal information, opt out of the "sale" or "sharing" of personal information, and not be discriminated against for exercising these rights. I do not sell personal information for monetary value. If advertising cookies are enabled with your consent, this may be considered "sharing" under California law; you can disable this at any time via Cookie preferences.

12. Children's Privacy

This website is not directed at children under 13 years of age (or 16 in the EU). I do not knowingly collect personal information from children. If you believe a child has submitted personal information through this Site, please contact me at Kashifullah919@gmail.com and I will promptly delete it.

13. Security

I take reasonable measures to protect your information, including:

HTTPS encryption for all data in transit
Secure email delivery via Resend
Cloudflare's enterprise-grade DDoS protection and firewall
Honeypot fields and rate limiting to prevent automated abuse
Minimal data collection (I only collect what I need)

However, no method of transmission over the Internet or electronic storage is 100% secure. While I strive to protect your personal information, I cannot guarantee absolute security.

14. Changes to This Policy

I may update this Privacy Policy from time to time to reflect changes in technology, regulation, or how the Site operates. Material changes will be posted on this page with an updated "Last updated" date and, where appropriate, additional notice. Your continued use of the Site after changes constitutes acceptance of the revised policy.

15. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact me at: