Privacy Policy

1. Information Collection

I collect minimal personal information necessary to provide my services and communicate with clients. This includes:

• Name (via contact form or direct email)
• Email address (for project communication and invoicing)
• Business requirements and project specifications (shared via email or collaboration tools)
• Optional: Company name, website URL, and social media handles (for portfolio and case studies with prior consent)

I do not collect sensitive personal data such as government IDs, financial information, or health records unless explicitly required for a specific project and with your written consent.

2. Data Usage

Any information collected is used solely for:

• Project scoping, requirement gathering, and service delivery
• Client communication and status updates
• Invoicing and payment processing
• Post-launch support and maintenance (if applicable)

Your data is never sold, rented, or shared with third parties for marketing purposes.

3. Data Protection & Security

I take data protection seriously and implement reasonable security measures to protect your information:

• All credentials are stored securely using environment variables and secret management systems
• Source code and sensitive configuration files are never committed to public repositories
• Third-party services (hosting, databases, APIs) are chosen based on their security and compliance standards
• Project handover includes complete transfer of all data and access credentials to your ownership

However, please note that no method of transmission or storage is 100% secure. While I strive to protect your data, I cannot guarantee absolute security.

4. Cookies & Tracking

My portfolio website may use minimal cookies for essential functionality:

• Essential cookies: Required for basic site functionality (theme preference, navigation state)
• Analytics cookies: May be used to understand site traffic and usage patterns (e.g., Vercel Analytics)

You can disable cookies through your browser settings. Note that this may affect site functionality.

5. Your Rights (GDPR & Privacy Act)

Depending on your location, you may have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data (where legally permissible)
• Right to Portability: Request data transfer to another service
• Right to Object: Object to processing of your personal data

To exercise these rights, contact me at sahaduzzaman.cse@gmail.com.

6. Data Retention

I retain your personal information only as long as necessary for the purposes outlined in this policy, or as required by law. Upon project completion and final handover, you may request deletion of any retained communications or data.

7. International Data Transfers

As I work with international clients, your information may be processed and stored in countries other than your own. I ensure that any cross-border data transfers comply with applicable data protection laws and implement appropriate safeguards.

8. Children's Privacy

My services are not intended for individuals under the age of 16. I do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided personal information, please contact me for deletion.

9. Changes to This Policy

I may update this privacy policy from time to time. Significant changes will be communicated via email or prominent notice on this website. Your continued use of my services after such changes constitutes acceptance of the updated policy.