Privacy policy

Last updated: 6 November 2026

Who controls your data

Furqan Ahmed (builtbyzulfi), Manama, Bahrain. Email: hello@builtbyzulfi.com.

What I collect

  • Lead form: the details you type into the project form.
  • Newsletter: your email address and the time you agreed to receive build notes.
  • Rate limiting: a hashed version of your IP address, kept for 2 days. I never store the raw address.
  • Visit counts: Cloudflare Web Analytics, which does not use cookies.

Who processes it

  • Cloudflare: hosting, the database, Turnstile spam checks, Web Analytics and email routing.
  • Fontshare: the site's fonts load from their servers, so they see your request for the font files.
  • Cal.com and WhatsApp: only if you click through to them. Their own privacy policies then apply.

Why, and on what basis

I use your lead details to reply to your request. I send build notes only when you have agreed to them. The hashed IP and the analytics keep the site working and protect it from abuse.

How long I keep it

  • Leads: 24 months after our last contact.
  • Subscribers: until you unsubscribe.
  • Hashed IP: 2 days.

Your rights

Under Bahrain's Personal Data Protection Law (Law No. 30 of 2018) and the GDPR, you can ask for access, correction, deletion, to object to how I use your data, and to withdraw consent. Email hello@builtbyzulfi.com and I will answer.

What I do not do

I do not sell personal data. I do not make automated decisions about you.

Changes

If this policy changes, the date at the top changes with it.