Privacy Policy

This website (rafeemizan.com) is operated by Rafee Mizan Khan Chowdhury Niloy(“I”, “me”). I am the data controller for all personal data collected via this site.

If you have any questions or requests about your personal data, you can reach me at Show email address.

I only collect data that is necessary for providing a functional, safe, and improving website. Below is a breakdown of the data collected and the purpose for each.

A cookie banner asks for your choice on your first visit. Optional cookies stay off until you allow them, and you can change your choice at any time with “Cookie settings” in the footer.

• Strictly necessary: one cookie (cc_cookie) that remembers your choice for six months. Always on.
• Analytics: Google Analytics 4 cookies, set only if you allow analytics.
• Marketing: Meta Pixel cookies, set only if you allow marketing.

The site uses Google Consent Mode v2. If you decline analytics, Google Analytics may still receive cookieless pings without identifiers, which Google uses to model aggregate traffic. If you decline marketing, the Meta Pixel does not load.

Vercel Analytics does not use cookies.

I use the following third-party services that may process your data under their own privacy policies:

• Formspree: contact form, checklist download, and GDPR website check request processing
• Google: analytics (GA4) and tag management (GTM)
• Vercel: website hosting, analytics, and speed insights
• Sanity: content management (articles)
• Meta: ad measurement (Meta Pixel), only with your consent to marketing cookies

I do not sell or rent your personal data. Apart from the Meta Pixel described above, which only runs if you allow marketing cookies, I do not share it with any third party for marketing purposes.

If you are located in the European Economic Area (EEA) or the UK, you have the following rights under the General Data Protection Regulation (GDPR):

• Access — request a copy of the personal data I hold about you.
• Rectification — ask me to correct inaccurate data.
• Erasure — request deletion of your personal data.
• Restriction — ask me to limit how I process your data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, for processing based on consent.

To exercise any of these rights, email me at Show email address. I will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

This site is served over HTTPS at all times. Form submissions — including the contact form, checklist download, and GDPR website check request — are transmitted securely to Formspree. I do not store this data on my own servers. I take reasonable technical and organisational measures to protect your data, but no transmission over the internet is 100% secure.

This site is not directed at children under the age of 16. I do not knowingly collect personal data from children. If you believe a child has submitted data to me, please contact me so I can delete it.

I may update this policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of the site after an update constitutes acceptance of the revised policy.