Privacy Policy

Last updated: 26 June 2026

This Privacy Policy explains how Shaheryar Ahmed ("I", "me", "my") operating at shaheryarahmed.com collects, uses, and protects your personal data. I am committed to complying with the GDPR (EU), CCPA (California), COPPA (USA), and CIPA (California).

1. Who I Am

Data controller: Shaheryar Ahmed
Email: gerryscommunique@gmail.com
Website: shaheryarahmed.com
Based in Pakistan.

2. What Data I Collect

Information you provide directly:

Name and email address when you submit a contact or audit request form
Website URL and business information you share voluntarily
Messages and enquiries you send to me

Information collected automatically (only after your consent):

Analytics cookies (Google Analytics 4): anonymised traffic data including pages visited, session duration, and referral source. IP addresses are anonymised.
Marketing cookies (Meta Pixel, when enabled): conversion events and page views used for advertising. No data is shared without your explicit consent.

No third-party tracking of any kind fires before you consent. If you decline or ignore the cookie banner, only strictly necessary, non-identifying cookies may be set.

3. Children's Privacy (COPPA)

This website is not directed at children under 13 years of age. I do not knowingly collect personal data from children under 13. If you believe a child has submitted data, please contact me immediately and I will delete it.

4. Legal Basis for Processing (GDPR)

Consent – analytics and marketing cookies (you may withdraw at any time via Cookie Preferences in the footer)
Legitimate interest – responding to enquiries you have sent to me
Contract – delivering agreed services to clients

5. How I Use Your Data

To respond to your enquiry or audit request
To deliver contracted SEO services
To analyse website traffic and improve the site (only with analytics consent)
To serve relevant ads on Facebook/Instagram (only with marketing consent)

I do not sell, rent, or share your personal data with third parties for their own marketing purposes.

6. Third-Party Services

Google Analytics 4 – traffic analysis (analytics consent required). Google Privacy Policy
Meta Pixel – conversion tracking (marketing consent required). Meta Privacy Policy
Formspree – form submission processing. Formspree Privacy Policy
Calendly – meeting scheduling. Calendly Privacy Policy
Google Fonts – web fonts (no cookies set, no tracking).

7. California Privacy Rights (CCPA / CIPA)

California residents have the right to:

Know what personal data I collect and how it is used
Request deletion of your personal data
Opt out of the "sale" of personal data (I do not sell personal data)
Non-discrimination for exercising your rights

To exercise these rights, email me at gerryscommunique@gmail.com.

8. Your GDPR Rights

If you are in the EU or UK, you have the right to access, rectify, erase, restrict, or port your data, and to object to processing. To exercise any right, contact me at gerryscommunique@gmail.com. You may also lodge a complaint with your local data protection authority.

9. Data Retention

I retain enquiry data for up to 2 years or until you request deletion. Analytics data is retained for 14 months in Google Analytics (the minimum). Marketing pixel data is governed by Meta's own retention policies.

10. Security

All data is transmitted over HTTPS. I do not store payment card data. Form submissions are handled via Formspree's secure infrastructure. While I take reasonable precautions, no method of transmission over the internet is 100% secure.

11. Changes to This Policy

I may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of this website after changes constitutes acceptance.

12. Contact

For any privacy-related questions, please email gerryscommunique@gmail.com.