Privacy policy
Last updated: 6 November 2026
Who controls your data
Furqan Ahmed (builtbyzulfi), Manama, Bahrain. Email: hello@builtbyzulfi.com.
What I collect
- Lead form: the details you type into the project form.
- Newsletter: your email address and the time you agreed to receive build notes.
- Rate limiting: a hashed version of your IP address, kept for 2 days. I never store the raw address.
- Visit counts: Cloudflare Web Analytics, which does not use cookies.
Who processes it
- Cloudflare: hosting, the database, Turnstile spam checks, Web Analytics and email routing.
- Fontshare: the site's fonts load from their servers, so they see your request for the font files.
- Cal.com and WhatsApp: only if you click through to them. Their own privacy policies then apply.
Why, and on what basis
I use your lead details to reply to your request. I send build notes only when you have agreed to them. The hashed IP and the analytics keep the site working and protect it from abuse.
How long I keep it
- Leads: 24 months after our last contact.
- Subscribers: until you unsubscribe.
- Hashed IP: 2 days.
Your rights
Under Bahrain's Personal Data Protection Law (Law No. 30 of 2018) and the GDPR, you can ask for access, correction, deletion, to object to how I use your data, and to withdraw consent. Email hello@builtbyzulfi.com and I will answer.
What I do not do
I do not sell personal data. I do not make automated decisions about you.
Changes
If this policy changes, the date at the top changes with it.