Privacy Policy

1. Data Controller

The data controller is Mohammad Farhaan Jahoor, VAT no. (P.IVA) 06206260876, based in Italy.

Contact: me@farhaanjahoor.dev — certified email (PEC): farhaan@pec.it.

2. What data is processed

Contact form: name, email address, subject and message content — only what you type into the form.

Technical data: when you submit the form, your IP address is processed for rate limiting and abuse prevention, and included in the notification email so I can identify abuse.

This site does not require an account and collects no other personal data.

3. Purpose and legal basis

Contact form data is processed for one purpose only: replying to your enquiry. The legal basis is taking steps at your request prior to entering into a contract (art. 6(1)(b) GDPR) or legitimate interest in answering correspondence (art. 6(1)(f) GDPR).

Anti-abuse processing (IP, anti-spam verification) is based on legitimate interest in protecting this service (art. 6(1)(f) GDPR).

Analytics runs only with your consent (art. 6(1)(a) GDPR) — see section 6.

4. Retention

Messages arrive as email and are kept only as long as needed to handle the conversation, then deleted with ordinary mailbox housekeeping. No separate database of submissions is kept.

5. Anti-spam (Cloudflare Turnstile)

The contact form is protected by Cloudflare Turnstile, an anti-abuse service provided by Cloudflare, Inc. When you submit the form, Turnstile evaluates technical signals from your browser to distinguish humans from bots; it may set strictly-necessary cookies for that sole purpose.

Turnstile is designed not to track users across sites. See Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy/.

6. Analytics (Google Analytics 4)

This site uses Google Analytics 4 to understand aggregate usage. GA4 loads and sets cookies only after you click "Accept" in the cookie banner; if you decline, nothing is loaded and no analytics cookies are set.

IP anonymization is enabled. You can withdraw or change your choice at any time via "Cookie preferences" in the footer.

7. Recipients and transfers

Data is handled by the technical providers needed to run this site: the hosting provider (EU), the email (SMTP) provider used to deliver contact messages, Cloudflare (anti-spam) and Google (analytics, only with consent). Google and Cloudflare may involve transfers outside the EU, covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

No data is sold or shared for marketing.

8. Your rights

Under articles 15–22 GDPR you can request access, rectification, erasure, restriction, portability, and object to processing. Write to me@farhaanjahoor.dev.

You also have the right to lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

9. No profiling

No automated decision-making or profiling is carried out, and no marketing communications are sent.