Privacy should be understandable before it is accepted.

Who is responsible

This website is operated by Ali Owji, who is responsible for the personal information described in this notice. Privacy questions, access requests and deletion requests can be submitted through the secure contact form. Please begin the message with “Privacy request” so it can be identified promptly.

Information collected

When you contact me

The form collects your name, work or institutional email address, optional organisation, reason for contacting me and message. It also sends a timestamp and uses a hidden anti-spam field. Request information such as an IP address may be processed briefly to enforce origin checks and rate limits.

When you use the site

Appearance, navigation and sound choices are stored locally in your browser. Session storage remembers whether an orientation prompt was dismissed and helps prevent accidental repeat form submissions. These settings are not used to profile you.

Privacy-focused website analytics

Vercel Web Analytics provides anonymous, aggregate page-view reporting without using cookies or persistent cross-site identifiers. A data point may include the page path, referrer, filtered query information, approximate region, browser, operating system and device type. It does not receive contact-form contents, names or email addresses, and its short-lived visitor identifier is discarded after 24 hours.

Optional Google analytics

If you allow analytics and measurement is active, Google Tag Manager may deliver the configured Google Analytics 4 tags. Google Analytics may receive page views, deliberately configured interaction events, referral information, browser and device details, approximate location derived from network information and first-party identifiers used to distinguish visits. This site does not send form contents, names or email addresses to Google Analytics.

Why information is used

• To assess and respond to a message you choose to send.
• To protect the form and website against spam, abuse and security threats.
• To preserve settings you explicitly choose on your device.
• To understand aggregate site use and improve content and navigation; Google measurement is used only with your consent.

Contact information is not added to a marketing list, sold or used for unrelated advertising. Google Analytics consent is optional and refusing it does not restrict access to the website.

Basis for processing

Contact details are processed to take steps at your request and for the legitimate purpose of responding to genuine enquiries. Security information is processed to protect the site and its users. Preference storage supports features you request. Anonymous, cookieless Vercel reporting supports the legitimate interest in understanding whether the site works effectively; optional Google Analytics is processed only after affirmative consent, which can be withdrawn at any time.

Service providers and transfers

Information may be handled by providers that host the site, deliver contact-form messages or maintain security. Vercel hosts the site and provides anonymous aggregate Web Analytics. Resend processes contact details and message contents only to deliver the private enquiry notification; a contact is not added to a Resend Audience and no automated email is sent to the submitter. These providers receive only the information required to provide their service. If Google analytics is allowed, Google LLC and its affiliates may process tag-management and analytics information under Google’s applicable terms.

Because this website serves people internationally and Ali works between Canada and the United Arab Emirates, information may be processed outside your country. Those locations may have different privacy rules. Reasonable contractual, technical and organisational safeguards should be used where required.

How long information is kept

Contact correspondence is retained only while it remains reasonably necessary to respond, evaluate an opportunity, maintain an appropriate business record or meet a legal obligation, and is then deleted or anonymised. The application-level rate-limit record is held in server memory for approximately 15 minutes. Browser preferences remain until you change or clear them. The analytics-consent choice is renewed after 12 months.

If GA4 is enabled, the property should be configured for a 14-month event-data retention period. Google may retain aggregated reporting information for longer under its terms. The first-party GA cookies configured by this site expire after no more than approximately 13 months.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the use of personal information, receive a portable copy, withdraw consent and complain to a privacy regulator. Identity may need to be verified before a request is fulfilled. Applicable legal exceptions may limit some requests.

Security and children

The form uses same-origin checks, submission limits, server-side validation, a honeypot and restricted delivery credentials. No internet transmission or storage system can be guaranteed completely secure, so please do not submit confidential, financial, health or government-identifier information through the form.

This professional portfolio is not directed to children, and personal information from children is not knowingly requested.

Changes to this notice

The effective and review dates above will be updated when this notice changes. If a material change introduces a new purpose or third party that depends on consent, a fresh choice will be requested before that processing begins. See the cookie policy for the current storage inventory.