Privacy Policy

Last updated: 6 August 2026

This Privacy Policy explains how Shaheryar Ahmed ("I", "me", "my") operating at shaheryarahmed.com collects, uses, and protects your personal data. I am committed to complying with the GDPR (EU), CCPA/CPRA (California), COPPA (USA), and CIPA (California).

1. Who I Am

Data controller: Shaheryar Ahmed
Email: info@shaheryarahmed.com
Website: shaheryarahmed.com
This site is operated remotely; the data controller can be contacted at the email above.

2. What Data I Collect

Information you provide directly:

Information collected automatically (only after your consent):

No third-party tracking of any kind fires before you consent. If you decline or ignore the cookie banner, only strictly necessary, non-identifying cookies may be set.

3. Children's Privacy (COPPA)

This website is not directed at children under 13 years of age. I do not knowingly collect personal data from children under 13. If you believe a child has submitted data, please contact me immediately and I will delete it.

4. Legal Basis for Processing (GDPR)

5. How I Use Your Data

I do not sell or rent your personal data to data brokers, and I do not share it with third parties for their own independent marketing. I do share limited data with Meta to measure and improve my advertising, as described in Section 6a. Under California law this may count as "sharing" for cross-context behavioral advertising, and you can opt out at any time (see Section 6a and Section 7).

6. Third-Party Services

6a. Data I Share With Meta (Facebook / Instagram)

I use two Meta advertising tools together: the Meta Pixel, which runs in your browser, and the Meta Conversions API, which sends the same conversion events from my server directly to Meta. Both exist to measure how my Facebook and Instagram ads perform and to improve their targeting. Running both is standard practice; the two are linked by a shared event identifier so a single action is not counted twice.

What is shared with Meta:

How to opt out:

7. California Privacy Rights (CCPA / CPRA / CIPA)

California residents have the right to:

How to opt out of sharing: decline marketing cookies in the banner (main site); use the "Your Privacy Choices" link on /go/ advertising pages; or send a Global Privacy Control (GPC) signal, which I honor automatically. To exercise any of these rights, email me at info@shaheryarahmed.com.

8. Your GDPR Rights

If you are in the EU or UK, you have the right to access, rectify, erase, restrict, or port your data, and to object to processing. To exercise any right, contact me at info@shaheryarahmed.com. You may also lodge a complaint with your local data protection authority.

9. Data Retention

I retain enquiry data for up to 2 years or until you request deletion. Analytics data is retained for 14 months in Google Analytics (the minimum). Marketing pixel data is governed by Meta's own retention policies.

10. Security

All data is transmitted over HTTPS. I do not store payment card data. Form submissions are handled via Formspree's secure infrastructure. While I take reasonable precautions, no method of transmission over the internet is 100% secure.

11. Changes to This Policy

I may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of this website after changes constitutes acceptance.

12. Contact

For any privacy-related questions, please email info@shaheryarahmed.com.

This policy is provided for transparency and does not constitute legal advice.