Privacy policy

This policy explains what personal data is collected through arsandhu.com, why, and what you can do about it. It is written to be read, not to be survived.

Who is responsible for your data

Abdul Rehman Sandhu is the data controller for personal data collected through this site.

• 1 Telegraph Street, London EC2R 7AR, United Kingdom
• [email protected]

What is collected

When you use the contact form. Your name, email address, business name if you give one, and the message you write. Your IP address and browser identifier are recorded alongside it, solely so that abusive or automated submissions can be identified. The enquiry is stored so that it is not lost if the notification email fails to send.

When you simply visit. The web server records the usual technical information in its logs — IP address, browser type, the page requested and the time. This happens on every website and is needed to operate and secure the service.

If you accept analytics cookies. StatCounter records anonymous usage statistics such as pages viewed and referring site. If you decline, or ignore the banner, StatCounter is never loaded and sets nothing. See the cookie policy.

Why, and on what legal basis

• Responding to your enquiry — legitimate interests. You contacted a business expecting a reply; sending one is what you asked for.
• Keeping the site secure and working — legitimate interests. Server logs are needed to diagnose faults and identify abuse.
• Analytics — consent. Nothing is set unless you accept, and you can change your mind at any time.

Your details are not used for marketing. There is no newsletter, no list, and nothing is sold or shared for advertising.

Who else sees it

Only the suppliers needed to run the site, each acting on instructions:

• The hosting provider, which stores the site and its server logs.
• The email provider, which delivers your enquiry.
• StatCounter, for analytics, and only where you have consented.

Data is processed in the United Kingdom and the European Economic Area. Personal data is not sold, and is disclosed otherwise only where the law requires it.

How long it is kept

Enquiries are kept for 24 months from your last contact, so that a conversation picked up later still has its history, and are then deleted. Server logs are kept for a short operational period. Analytics data is retained according to StatCounter's own schedule.

Your rights

Under UK GDPR you can ask for a copy of your data, ask for it to be corrected or deleted, object to or restrict how it is used, ask for it in a portable format, and withdraw consent for analytics at any time. Withdrawing consent does not affect anything done beforehand.

To exercise any of these, email [email protected]. There is no charge and a response will follow within one month.

Complaints

If you think your data has been handled improperly, please raise it directly first — it is usually the fastest route to a fix. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes

Any material change to this policy will be reflected in the "last updated" date above.