Privacy Policy

Who is responsible

I am the data controller for this website. Johar Rehman, Pakistan. You can reach me at hello@joharcreativ.com. There is no data protection officer because the law does not require one for a practice of my size.

What I collect and why

The contact form asks for your first name, your work email, your website address and the option you pick about your biggest growth blocker. I use these to prepare your free site check and to reply to you. Nothing else happens with them.

If you email me directly, I keep the email and use it to answer you. If we start working together, I collect what any supplier needs: a billing address, a VAT number and the details in our scope agreement.

The legal basis is Article 6(1)(b) GDPR, because you are asking me to take steps before a possible contract, and Article 6(1)(f), my legitimate interest in answering enquiries sent to me.

How long I keep it

If we do not end up working together, I delete enquiry data within twelve months. Contracts, invoices and anything tax law makes me keep are stored for the statutory period, which can be up to ten years, then deleted.

Who else sees your data

I do not sell data, share it with advertisers or add you to a mailing list. A small number of processors handle data on my behalf under data processing agreements: GitHub, Inc. (United States), which hosts this site; Spaceship, Inc. (United States), which forwards email sent to this domain; and Google LLC, which provides the mailbox I read and reply from. Where a processor is outside the EEA, the transfer relies on the EU–US Data Privacy Framework or on standard contractual clauses. Analytics is covered in the Cookie Policy.

Your rights

You can ask me for a copy of your data, ask me to correct it, delete it, restrict how I use it, or hand it over in a portable format. You can object to processing based on legitimate interest, and where processing rests on consent you can withdraw that consent at any time. Email hello@joharcreativ.com and I will act on it within a month.

You also have the right to complain to a data protection supervisory authority, in the country where you live or work.

Changes

The current version of this policy always lives on this page. Last updated 23 August 2026.