Privacy Policy

This website (rafeemizan.com) is operated by Rafee Mizan Khan Chowdhury Niloy(“I”, “me”). I am the data controller for all personal data collected via this site.

If you have any questions or requests about your personal data, you can reach me at rafee.niloy@gmail.com.

I only collect data that is necessary for providing a functional, safe, and improving website. Below is a breakdown of the data collected and the purpose for each.

This site uses cookies for analytics purposes (Google Analytics 4), loaded via Google Tag Manager on every page visit. No consent banner is currently shown; GA4 runs on the basis of legitimate interest in understanding how visitors use the site.

You can opt out at any time by installing the Google Analytics opt-out browser add-on, or by clearing analytics cookies in your browser settings. Opting out has no effect on the core functionality of the site.

Vercel Analytics does not use cookies.

I use the following third-party services that may process your data under their own privacy policies:

• Formspree — contact form, checklist download, and GDPR website check request processing
• Google — analytics (GA4) and tag management (GTM)
• Vercel — website hosting, analytics, and speed insights
• Sanity — content management (articles)

I do not sell, rent, or share your personal data with any third party for marketing purposes.

If you are located in the European Economic Area (EEA) or the UK, you have the following rights under the General Data Protection Regulation (GDPR):

• Access — request a copy of the personal data I hold about you.
• Rectification — ask me to correct inaccurate data.
• Erasure — request deletion of your personal data.
• Restriction — ask me to limit how I process your data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, for processing based on consent.

To exercise any of these rights, email me at rafee.niloy@gmail.com. I will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

This site is served over HTTPS at all times. Form submissions — including the contact form, checklist download, and GDPR website check request — are transmitted securely to Formspree. I do not store this data on my own servers. I take reasonable technical and organisational measures to protect your data, but no transmission over the internet is 100% secure.

This site is not directed at children under the age of 16. I do not knowingly collect personal data from children. If you believe a child has submitted data to me, please contact me so I can delete it.

I may update this policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of the site after an update constitutes acceptance of the revised policy.