Privacy Policy

The short version

• Analytics only run if you say yes. Google Analytics and Microsoft Clarity stay switched off until you accept them in the cookie banner, and you can change your mind any time from “Cookie settings” in the footer.
• No advertising trackers, no ad retargeting, and your information is never sold.
• The contact form doesn’t send anything to this Site. It opens your own email app with your message ready, and nothing is sent until you press send there.
• The chatbot, terminal and brand builder run entirely in your browser. What you type there is not sent anywhere or stored, and disappears when you leave the page.

1. Information I collect

• Information you give me: your name, email address, phone number, company, the services you’re interested in, budget and timeline, and anything you write when you email, call or message me, or share during a project (such as brand assets, content, logins you choose to provide, and feedback).
• Server logs: like almost every website, the hosting provider (Vercel) automatically records standard technical data (IP address, browser type, the page requested, referring page, and the time of the request) to deliver the Site, keep it secure and fix errors.
• Analytics data (only with your consent): device and browser type, operating system, screen size, language, approximate location derived from your IP address, pages visited, how you arrived, time on page, and interactions such as clicks, scrolling and mouse movement. Microsoft Clarity may also create session replays and heatmaps; it masks text typed into fields.
• I don’t ask for, and ask you not to send through the Site, sensitive information such as government IDs, health records, patient information or payment-card details.

2. Cookies and similar technologies

Strictly necessary: the Site stores your cookie choice in your browser’s local storage (key “jnaik-consent”) so the banner doesn’t ask again. This is needed for the Site to respect your choice and is not used for tracking.

Analytics (only if you choose “Sure, have a cookie”): Google Analytics 4, provided by Google LLC, measures traffic and how pages are used, and sets first-party cookies such as “_ga” and “_ga_<ID>” that typically last up to 2 years. Microsoft Clarity, provided by Microsoft Corporation, produces heatmaps and session recordings, and sets cookies such as “_clck” (up to 1 year) and “_clsk” (1 day). Google Analytics runs with Google Consent Mode v2 with advertising storage, ad user data and ad personalisation always denied.

If you choose “Just the essentials”, or your browser sends a Global Privacy Control (GPC) signal, neither analytics tool is loaded. If you withdraw consent later from “Cookie settings”, the analytics cookies set on this Site are deleted and the page reloads without them.

You can also block or delete cookies in your browser settings. Google offers an opt-out add-on at tools.google.com/dlpage/gaoptout. Google’s and Microsoft’s own use of data is described at policies.google.com/privacy and privacy.microsoft.com.

3. How I use information

• To reply to you, prepare proposals, and deliver, support and invoice the work we agree on.
• To run, secure, debug and improve the Site, including understanding which pages are useful (analytics, with consent).
• To send you messages about your enquiry or project. I don’t send marketing newsletters unless you ask for them.
• To prevent fraud and abuse, establish or defend legal claims, and meet legal, tax and accounting obligations.
• I don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Legal bases (EEA and UK visitors)

Where the GDPR or UK GDPR applies, I rely on: your consent (for analytics cookies, which you can withdraw at any time); performance of a contract or steps you ask for before one (for enquiries and projects); my legitimate interests in running, securing and improving my business and the Site, balanced against your rights; and compliance with legal obligations.

5. Sharing

I share personal information only with service providers who help me run the Site and my work, and only as far as they need it: website hosting (Vercel), my email provider, analytics (Google, Microsoft, only with consent), and the tools used to deliver a project you’ve hired me for (for example design, development, hosting, CRM or AI platforms we agree on).

I may also disclose information when required by law, legal process or a government request; to enforce the Terms of Service or a project agreement; to protect the rights, property or safety of me, my clients or others; or as part of a business transfer, such as the sale or reorganisation of my business, subject to this Policy.

If an invoice goes unpaid or a payment is disputed, I may share the information needed to recover it (your name, business, contact and billing details, the Proposal, invoices, payment history and relevant correspondence) with payment processors and card issuers handling the dispute, collection agencies, attorneys, courts or arbitrators, and, for business accounts, commercial credit reporting agencies. Any reporting about an individual follows the Fair Credit Reporting Act and other applicable law.

I may use aggregated or de-identified information, which no longer identifies you, for any lawful purpose. I do not sell personal information, and I do not “share” it for cross-context behavioural advertising.

6. International transfers

I work from the United States and with clients and collaborators in other countries, including Pakistan and the United Kingdom, and my providers may process data in the United States and elsewhere. Where the law requires it for transfers out of the EEA or UK, I rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK Addendum.

7. How long information is kept

Enquiries are kept for as long as needed to respond and manage any work that follows. Project, contract and billing records are kept for as long as tax and accounting rules require (typically up to 7 years), and longer where needed while an amount is unpaid, a dispute or chargeback is open, or a legal claim could still be brought. Analytics data follows the providers’ retention settings (Google Analytics is set to 14 months; Clarity keeps recordings for up to 30 days and heatmap data for up to 13 months). Server logs are kept by the host for a short period for security and troubleshooting.

8. Security

The Site is served only over HTTPS, uses a strict Content Security Policy and standard security headers, and loads no third-party scripts unless you consent to analytics. No method of transmission or storage is completely secure, so I can’t guarantee absolute security, but I take reasonable technical and organisational measures to protect the information you share. Please don’t send passwords or sensitive data by email; we’ll agree a safer method during a project.

9. Your rights

EEA and UK: you may have the right to access, correct or delete your personal information, restrict or object to its processing, receive a portable copy, and withdraw consent at any time. You can also complain to your local data-protection authority (in the UK, the Information Commissioner’s Office).

California (CCPA/CPRA): you have the right to know what personal information I collect, use and disclose; to access, correct and delete it; and to opt out of its sale or sharing (I do neither) and limit use of sensitive information (I don’t collect it). In the past 12 months I may have collected identifiers (such as name, email, phone, IP address), commercial information (services you asked about), internet activity (analytics, with consent), approximate location, and professional information (company and role), for the purposes described above.

Texas, Virginia, Colorado, Connecticut, Utah and other US states: you may have similar rights to access, correct, delete and obtain a copy of your information, to opt out of targeted advertising, sale or profiling, and to appeal a decision about your request.

To exercise any right, email the address below. I’ll verify your request, respond within the time the law allows, and never treat you differently for using your rights. You may use an authorised agent. The Global Privacy Control signal is honoured automatically.

10. Children

The Site is for businesses and adults. It is not directed to children, and I don’t knowingly collect information from anyone under 16 (under 13 in the United States). If you believe a child has sent me information, contact me and I’ll delete it.

11. Links and embedded content

The Site links to social profiles, client websites, publications and other sites I don’t control. Their own privacy policies apply when you visit them.

12. Changes

If this Policy changes, the new version will be posted here with a new “last updated” date. Material changes take effect when posted, and if they affect how analytics consent works, the cookie banner will ask you again.

Contact

Jawad Farooq Naik · Allen, Texas, United States · hello@jnaikcreates.solutions · (339) 222-7696