Privacy policy
Last updated 10 October 2026
This policy explains what personal data I collect through naumanzafar.com, why, and what you can do about it. It is written to meet the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), and the EU and UK GDPR for visitors in Europe.
Who is responsible
Nauman Zafar, Dubai, United Arab Emirates, is the controller of personal data collected through this site. Contact: naumanzafarofficial1@gmail.com, +971 52 513 9626.
What I collect
When you send an enquiry: your name, email address, the city or country you enter, the service you’re interested in, and your message. The form is delivered to my inbox through FormSubmit (formsubmit.co), which processes it only to forward it. If you choose to send it by WhatsApp or email instead, those services also process it under their own policies.
When you subscribe to the newsletter: your email address goes to Substack, which sends the newsletter and processes it under its own privacy policy. You can unsubscribe from any issue.
When you browse: nothing that identifies you, unless you accept analytics cookies. If you do, Google Analytics 4 records pages viewed, approximate location (country/city), device type and how you arrived. IP addresses are not stored in full and advertising features are switched off. See the cookie policy.
What I don’t collect: payment details, government ID numbers, or data about children. Please don’t send passport or bank details through the form.
Why I use it, and the legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to your enquiry and preparing a proposal | Enquiry details | Steps you asked for before a contract; legitimate interest |
| Delivering an engagement you sign up for | Contact and project details | Contract |
| Understanding which pages are useful | Analytics data | Your consent, which you can withdraw at any time |
| Meeting legal and tax obligations | Invoices and records | Legal obligation |
I don’t sell personal data, and I don’t use it for automated decisions that affect you.
Who I share it with
- Service providers that host this site, deliver email and (only with consent) run analytics, under contracts that limit their use of the data.
- Licensed partners (for example a tax agent, broker or lender) only when you ask me to involve them, and only what they need.
- Authorities where the law requires it.
International transfers
I’m based in the UAE, and some providers process data in other countries, including the EU and the US. Where data leaves the country you’re in, I rely on the safeguards the provider offers, such as standard contractual clauses.
How long I keep it
Enquiries that don’t become engagements: up to 24 months, then deleted. Client records: for the period tax and commercial law requires, typically five years after the engagement ends. Analytics data: 14 months.
Your rights
Depending on where you live, you can ask to access, correct, delete, restrict or port your data, object to processing, and withdraw consent. Email naumanzafarofficial1@gmail.com with the subject “Privacy request”. I reply within 30 days. You can also complain to your data protection authority, such as the UAE Data Office, the UK ICO, an EU supervisory authority, or India’s Data Protection Board.
Security
The site is served over HTTPS, the form has spam protection, and access to enquiries is limited to me. No system is perfectly secure; if a breach affects you, I’ll tell you and the relevant authority as the law requires.
Changes
If this policy changes, the date at the top changes too. Significant changes will be highlighted on the home page for 30 days.