Privacy Policy

I collect information in three ways. When you submit the contact form, I collect your name, email address, optional company name, the engagement type you selected, and the message you wrote. When you subscribe to the newsletter, I collect your email address only. When you visit the site with analytics consent enabled, third-party providers collect anonymous device, browser, and page-view information described in Section 04. No bank, payment, or government identification data is ever requested by this site.

Contact form submissions are read by me personally and used solely to respond to your inquiry, scope a project, or schedule a discovery call. Newsletter subscriptions are used to send occasional engineering notes related to Flutter, Laravel, GCC engineering practice, and related topics. Analytics data is used in aggregate to understand which pages are read, identify broken paths, and improve the writing. I do not sell, rent, or share your personal information with marketers.

This site uses three categories of cookies and local storage. Strictly necessary storage holds your theme preference (light or dark) and your cookie consent choice — these are required for the site to function and cannot be disabled. Analytics cookies are only set after you give consent in the cookie banner; they are removed if you withdraw consent. No advertising cookies are set unless an advertising integration is explicitly enabled — none currently are. You can change your cookie choices at any time via the "Cookie preferences" link in the footer.

This site uses a small number of trusted processors. Resend (resend.com) delivers contact-form and newsletter emails and stores your address securely. Google Analytics and Microsoft Clarity, if enabled and after your consent, collect aggregated visitor analytics — IP addresses are anonymised where the provider supports it. Vercel and the hosting infrastructure may collect standard server logs (IP, user-agent, timestamps) for security and abuse prevention. Each processor has its own privacy policy linked in their documentation; I select processors known for sound security and data-handling practices.

Contact-form messages are retained for as long as needed to respond and complete any related engagement, plus an additional period for accounting and legal record-keeping where required. Newsletter subscriptions are retained until you unsubscribe — every email includes a one-click unsubscribe link, and unsubscribing removes you from the active list. Analytics data is retained for 14 months and then deleted by the provider. Server access logs are retained for 30 to 90 days.

Under the EU General Data Protection Regulation (GDPR), Qatar's Personal Data Privacy Protection Law (PDPL), and other applicable privacy laws, you have the right to: access the personal information I hold about you; correct inaccurate information; request deletion ("right to be forgotten"); request a portable copy of your data; object to specific processing; and withdraw consent at any time without affecting prior processing. To exercise any of these rights, email me at usvighio@gmail.com — I respond within 30 days. If you are unsatisfied with my response, you have the right to lodge a complaint with your local data protection authority.

This site is operated from Qatar, but its processors (email delivery, analytics, hosting) are based in the European Union, the United Kingdom, and the United States. When personal data is transferred outside Qatar or the EEA, it is protected by the processor's contractual safeguards (Standard Contractual Clauses or equivalent). I do not transfer data to jurisdictions without an adequate legal framework for personal data.

I may update this policy as the site evolves or as legal requirements change. The "Last updated" date at the top of this page reflects the most recent revision; material changes are flagged on the contact page for at least 30 days. For any privacy question, request, or complaint, contact: Usman Vighio, usvighio@gmail.com, Doha, Qatar.