Legal
Privacy Policy
This page explains what happens to the information you send through this website, who else sees it, and how to have it removed. It is written to be read, not to be survived.
Last updated 26 October 2026
Who is responsible
This website is run by Ahmed Imtiaz Galib, a freelance web developer based in Bangladesh, working with clients worldwide. For anything on this page — including a request to see or delete what you have sent — write to contact@ahmedimtiaz.com.
What the forms collect
There are two forms on the site: the short contact form and the five-step start-a-project form. Between them they can collect:
- your name and email address;
- your WhatsApp or phone number, if you choose to give one;
- your country and, if you give it, your company;
- the details of the project: the service, the type of project, the address of a current site, your goals, the timeline and the budget range you pick;
- any file you attach, if you attach one;
- your IP address, which is kept with the enquiry for spam and abuse protection, and is not used to profile you.
Nothing else is collected. There are no accounts, no newsletter, no comments and no advertising on this site.
Why it is collected
The information is used to reply to your enquiry, to prepare a scope and a quote, to keep a record of what was agreed, and to keep the forms from being abused. That is all. Your details are never sold and never passed to anyone for marketing, and you are not added to any mailing list.
The forms ask for your consent when you submit them: you are giving your details so that I can answer you.
Cookies
This site sets no advertising or tracking cookies, and no cookie banner is shown because there is nothing to consent to.
- Two functional cookies are set by the site itself: one holds your session, and one protects the forms against cross-site request forgery. Both are strictly necessary for the site to work, and both disappear on their own.
- Cloudflare, which sits in front of the site, may set its own operational cookies on the domain — for example while checking that a visitor is not an automated attack. Those are part of the site's security, not analytics.
- Cloudflare Web Analytics measures visits without cookies and without fingerprinting, so it sets nothing on your device at all.
- Cloudflare Turnstile, the spam check on the forms, works by returning a short-lived token. It is not a tracking cookie and it is not used for advertising.
Who else handles it
Three services are involved in running this site, and nothing more:
- Hostinger hosts the site and the mailbox, so the enquiry passes through and is stored on their servers.
- Cloudflare provides the domain's DNS, protection and cookieless analytics, and its Turnstile service checks the forms. Your IP address is visible to it, as it is to any service in front of a website.
- The mailbox that delivers the notification to contact@ahmedimtiaz.com.
Your enquiry is not shared with anyone else, and no third party is allowed to use it for their own purposes.
How long it is kept
Enquiries are kept for up to 24 months from the last message, so that a project that comes back a year later still has its history; after that they are deleted. Any file you attached is deleted with the enquiry.
If your enquiry turns into a project, the records needed to run it — an agreement, invoices, and the client correspondence — are kept for as long as the law requires them to be kept.
Your rights
You can ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted, or object to it being held at all. Write to contact@ahmedimtiaz.com from the address you used and it will be dealt with.
If you are in the European Union or the United Kingdom, these are your rights under the GDPR and the UK GDPR. If you are in California, they are your rights under the CCPA and CPRA, and your information is never sold or shared for advertising. Wherever you are, the same request works.
Some information cannot be deleted on request: the records of a completed project that have to be kept for accounting and tax purposes.
Security
The site is served over HTTPS only. The forms are protected against automated abuse, and files sent with an enquiry are stored away from the public web root, so an attachment is never reachable at a public address. Do not send passwords, card numbers or other credentials — no enquiry needs them.
Children
This site offers professional services to businesses and adults. It is not aimed at children, and no information is knowingly collected from anyone under 16.
Changes to this policy
If what the site collects changes, this page changes with it and the date at the top of it moves. The current version is always the one published here. If you would like to know what changed since you last read it, ask.