Privacy Policy
Last updated: 5 October 2026
This Privacy Policy explains what personal data is collected when you visit https://shahidali.wp-deploy.com (the “Site”), why it is collected, who it is shared with, and what choices you have.
1. Who is responsible for your data
The data controller is Shahid Ali, an independent WordPress developer based in Pakistan, working with clients worldwide.
Email: contact@shahidali.me Phone: +92 344 788 1894
For any privacy question or request, email contact@shahidali.me.
2. What data I collect and why
a) Contact and project enquiry forms (Gravity Forms)
When you submit a form (for example “Discuss a Partnership”), I collect what you type in: typically your name, email address, company or agency name, project details, budget or timeline, and any files or links you attach. The form entry also records technical details such as your IP address, browser/user agent, the page you submitted from, and the date and time. [[Confirm in Gravity Forms > Settings whether IP storage is disabled; if so, remove “IP address” from this sentence.]]
- Why: to reply to your enquiry, prepare a quote, and start a working relationship if you wish.
- Legal basis: steps taken at your request before entering a contract; and my legitimate interest in responding to business enquiries and preventing spam and abuse.
b) Newsletter
If you subscribe, I collect your email address [[and name, if the form asks for it]]. Emails are sent through [[newsletter provider, e.g. Mailchimp / MailerLite / Brevo / FluentCRM]].
- Why: to send updates, articles and news about my services.
- Legal basis: your consent. You can withdraw it at any time with the unsubscribe link in any email, or by emailing me.
- Subscribing to the newsletter does not happen automatically when you submit a contact form.
c) Analytics
I use [[Google Analytics 4 / Plausible / Fathom / Matomo, or “no analytics tool” if none]] to understand how the Site is used, such as pages viewed, approximate location (country/city), device and browser type, referring website and time on page. [[If Google Analytics: IP anonymisation is applied by default in GA4 and data is not combined with advertising features.]]
- Why: to improve the Site and its content.
- Legal basis: your consent where required by law (see the Cookie Policy); otherwise my legitimate interest in understanding how the Site performs.
d) Hosting, security and performance
My hosting provider and caching/security tools automatically log technical data such as IP address, requested URL, browser, referrer and timestamps. The Site uses a caching plugin (WP Rocket) [[and a CDN/firewall such as Cloudflare, if used]] to load quickly and stay secure.
- Why: to deliver the Site, detect attacks and fix errors.
- Legal basis: legitimate interest in running a secure and reliable website.
e) Spam protection
[[If used: Google reCAPTCHA / Cloudflare Turnstile / Akismet / honeypot only.]] These tools may process your IP address and browser signals to tell humans from bots.
f) Direct communication
If you email, call or message me (including through LinkedIn, Facebook or X), I process the details you share in order to reply and manage our relationship.
3. Cookies
The Site uses cookies and similar technologies. Details, including how to change your choices, are in the Cookie Policy.
4. Who I share data with
I do not sell your personal data. I share it only with service providers who help run the Site and my business, under their own privacy terms or a data processing agreement:
| Provider | Purpose | Data involved |
|---|---|---|
| [[Hosting provider, e.g. SiteGround / Cloudways / Hetzner]] | Hosting the Site and form entries | All Site data, server logs |
| [[Newsletter provider]] | Sending newsletters | Email, name |
| [[Analytics provider]] | Site analytics | Usage data, device data |
| [[Email / mail delivery service, e.g. Google Workspace, SMTP service]] | Form notification emails and correspondence | Form content, email address |
| [[Cloudflare / CDN, if used]] | Security and performance | IP address, request data |
| [[Spam-protection provider]] | Bot detection | IP address, browser signals |
I may also disclose data if required by law, or to protect my rights, or in connection with a business transfer.
5. International transfers
I am based in Pakistan and my providers may store data in other countries, including [[hosting region, e.g. the EU or the United States]]. Where required, I rely on appropriate safeguards such as Standard Contractual Clauses or the provider’s data protection framework.
6. How long I keep data
[[Adjust to your actual practice.]]
- Form enquiries: up to 24 months after our last contact, or longer if we start a project (then see the Terms for project records).
- Newsletter subscribers: until you unsubscribe; I then keep a minimal suppression record so you are not re-added.
- Analytics data: [[14 months]] or per the tool’s retention setting.
- Server logs: [[30 days]].
- Accounting and legal records: as long as the law requires.
7. Your rights
Depending on where you live (for example the EU/EEA, UK or California), you may have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent at any time. You may also complain to your local data protection authority.
To use any right, email contact@shahidali.me. I may need to verify your identity first and will reply within one month (or the period your local law requires).
8. Security
I use reasonable technical and organisational measures: HTTPS, access controls, regular WordPress core/plugin updates, backups and limited access to form entries. No online system is completely secure, so I cannot guarantee absolute security.
9. Children
The Site is for businesses and is not directed at anyone under 16. I do not knowingly collect children’s data. If you believe a child has sent me data, contact me and I will delete it.
10. Client project data
If you hire me as a white-label or freelance developer, the handling of your and your end clients’ data (site access, credentials, content, user data) is covered by the Terms & Conditions and any separate agreement or data processing addendum we sign.
11. Links to other websites
The Site links to other websites (for example client portfolio sites and social profiles). I am not responsible for their privacy practices.
12. Changes to this policy
I may update this policy. The “Last updated” date shows the latest version. Material changes will be highlighted on the Site.
13. Contact
Shahid Ali contact@shahidali.me +92 344 788 1894