Privacy Policy

This Privacy Policy explains how Ashikur Rahman ("I" or "me") collects, uses, and protects information when you visit hey-ash.com (the "Site") or contact me through it. I am the person responsible for your data on this Site, and you can reach me at contact@hey-ash.com. My approach is privacy-first: I collect as little as possible, I use it only to reply to you and to run the Site, and I never sell it.

The free x-ray form on the homepage. When you ask for a site x-ray, I collect your website address and your email address. I use them to look at your site and send you what I found.

The contact form. When you use the form on the contact page, I collect the details you enter: your name, your email address, your website address, the tool you built your site with, the option you choose to describe your situation, and your message.

Email. If you email me directly, I receive whatever you choose to include, along with your email address. Email and the two forms are the only ways to contact me through the Site. There is no chat widget, no phone line, and no messaging app connected to it.

Information collected automatically. My hosting provider records basic technical data such as your IP address, browser type, and the pages you request, in standard server logs used to keep the Site secure and running. I also use Google Analytics 4 to understand how visitors find and use the Site, for example which pages are read and roughly which country visitors come from. It sets cookies and collects usage data such as a shortened IP address, device and browser information, and the pages you view. The Analytics script only loads after you scroll, tap, or move the pointer, or after twelve seconds on the page. I use this data only to improve the Site. It is not used for advertising, I do not set advertising cookies, and I do not sell or share your data for advertising. You can opt out with Google's browser add-on or by blocking cookies in your browser; the Site works without them.

What I do not collect. No account, login, or payment details, because the Site has none. No data from social networks; the LinkedIn and Facebook links are plain links that open those sites in a new tab and load nothing from them here. Fonts are served from this Site, not from a third-party font service.

• To read and answer your message, and to carry out the free x-ray you asked for.
• To provide, and where relevant quote for, the services you ask about.
• To keep the Site secure, reliable, and working as intended.
• To understand, in aggregate, which pages are useful so I can improve them.
• To meet legal obligations where they apply.

I do not add you to a newsletter or mailing list. The only emails you receive from me are replies to something you sent.

Where the GDPR, the UK GDPR, or similar laws apply, I rely on your consent when you submit a form, on my legitimate interest in answering enquiries, measuring the Site, and keeping it secure, and on taking steps at your request before entering into any agreement. You can withdraw consent at any time by emailing contact@hey-ash.com.

I do not sell your information or share it for advertising. A small number of providers process data on my behalf so the Site can run:

• Web3Forms, which receives both the x-ray form and the contact form and delivers each submission to my inbox by email. See their privacy policy.
• Cloudflare, which hosts and delivers the Site and keeps the server logs described above. See their privacy policy.
• Google Analytics, which measures Site usage so I can improve it. See Google's privacy policy.
• My email provider, which stores the messages you send me and my replies, in the same way any email service does.

I may also disclose information if the law requires it, or to protect the Site and its visitors from abuse.

The Site itself sets no cookies. Google Analytics sets its own first-party cookies to tell returning visitors from new ones; they carry a random identifier, not your name or email. Cloudflare may set a short-lived security cookie to protect the Site from automated abuse. Blocking cookies in your browser does not stop any part of the Site from working.

I keep enquiry and x-ray messages for as long as I need them to reply and to manage any work that follows, and no longer than necessary. Google Analytics data is retained on Google's standard schedule for the property. You can ask me to delete your details at any time by emailing contact@hey-ash.com, and I will confirm when it is done.

Depending on where you live, you may have the right to access, correct, delete, or restrict the use of your personal information, to object to certain processing, to withdraw consent, and to receive a copy of your data in a portable form. To exercise any of these, email me at contact@hey-ash.com. I will respond within thirty days. If you are in the EU or UK, you also have the right to complain to your local data protection authority.

The Site is served over encrypted HTTPS, both forms submit over HTTPS, and I use reputable providers that maintain their own security measures. Both forms include a hidden spam trap that catches automated submissions without collecting anything from you. No method of transmission over the internet is completely secure, but I take reasonable steps to protect your information.

I work with clients and providers in different countries, so your information may be processed outside the country where you live, including in the United States, where the providers above operate. Where that happens, I rely on those providers' own safeguards and standard contractual terms.

The Site is intended for businesses and adults. It is not directed at children, and I do not knowingly collect information from anyone under 16. If you believe a child has sent me information, email contact@hey-ash.com and I will delete it.

I may update this policy from time to time, for example if I add a tool or change how a form works. The date at the top shows when it was last revised. This revision reflects the removal of WhatsApp as a contact channel and the addition of the free x-ray form.

Questions about this policy or your information? Email me at contact@hey-ash.com. That address is the only contact channel for privacy requests.