What I collect, and why
When you send a message
The contact form and the quick note ask for your name, email address and message. The contact form can also take your company and role if you're hiring, or your business, what you need and a monthly ad spend range if you have a project. I use this to reply to you and, if it goes further, to talk about the role or the work.
The legal basis is my legitimate interest in answering messages sent to me, and, where you're asking about working together, taking steps you've asked for before a contract. You'll get one automatic email confirming your message arrived, with a copy of what you sent. You won't be added to a mailing list.
The spam check
Both forms use Cloudflare Turnstile to check a real person is sending the message. To do that, Cloudflare looks at technical details from your browser, such as your IP address and browser type. It's used only to stop spam.
The greeting when you arrive
On your first visit the site greets you in your language. It reads your browser's language setting, and asks Cloudflare for the country your connection comes from, worked out from your IP address. Only the two-letter country code comes back to the page. It isn't stored or used for anything else.
Analytics and marketing, only if you say yes
If you accept analytics cookies, the site loads Google Analytics, which tells me which pages people visit and how they found the site, and Microsoft Clarity, which shows how pages are used through clicks, scrolling and session recordings with what you type kept hidden. If you accept marketing cookies, it loads the Meta Pixel and other ad platforms' measurement tags, so I can see whether my own ads work and show them to people who've visited. These are managed through Google Tag Manager. If you don't accept, none of this loads.
Hosting
The site is hosted by Hostinger, whose servers keep standard logs (such as IP address, the page requested and the time) for security and to keep the site running.
Who helps me run this
These companies process data for me, under their own data protection terms:
- Cloudflare: runs the form handler, the spam check and the country lookup.
- Resend: delivers the enquiry to my inbox and the confirmation email to you.
- Zoho: hosts my email inbox, where your message is kept.
- Hostinger: hosts the website.
- Google: Tag Manager and Analytics, only if you accept cookies.
- Microsoft: Clarity, only if you accept analytics cookies.
- Advertising platforms such as Google Ads and Meta: only if you accept marketing cookies.
Some of them are based outside the UK, mainly in the United States. Where data goes abroad, it's covered by the safeguards in their data processing terms.
I don't sell your details or pass them to anyone else for their own marketing.
How long I keep it
I keep enquiry emails for up to two years after we last spoke, then delete them. If we go on to work together, I keep what's needed for the work and for my business records for as long as the law requires.
Your rights
You can ask me for a copy of the data I hold about you, ask me to correct it or delete it, object to how I use it, or ask me to restrict it. If you gave consent for cookies, you can withdraw it at any time. Email hello@badarmunir.com and I'll reply within a month.
If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. I'd appreciate the chance to put it right first.
Cookies
Cookies and similar storage are small files a website keeps in your browser. The essential ones below are always on because the site needs them. The rest only switch on if you choose to allow them, and you can change your choice at any time with , also in the footer.
| Name | What it does | Type | How long |
|---|---|---|---|
| bm-consent | Remembers your cookie choice | Essential | 12 months |
| bm-intro | Shows the greeting once per visit, not on every page | Essential | Until you close the tab |
| Cloudflare Turnstile | Checks a real person is sending a form | Essential | For the check only |
| _ga, _ga_* | Google Analytics: counts visits and how people use the site | Analytics | Up to 2 years |
| _clck, _clsk | Microsoft Clarity: shows how pages are used, so I can fix what's confusing | Analytics | 1 year and 1 day |
| _gcl_au | Google Ads: measures whether my ads lead to enquiries | Marketing | 3 months |
| _fbp | Meta: measures my ads on Facebook and Instagram | Marketing | 3 months |
The exact analytics and marketing cookies depend on which of these tools are running at the time. None of them are set unless you've allowed that type.
Changes
If I change how I use your data, I'll update this page and the date at the top.