What I Collect, and What I Don't

I'm Hamidul Haque, an independent copywriter, designer, and developer working from Dhaka, Bangladesh. This site, hamidulhaque.com, is run by me personally — there is no agency, no team, and no third party handling your data on my behalf beyond the service providers listed below.

For anything in this policy, including requests about your own data, write to hello@hamidulhaque.com. I answer these myself.

This policy covers the website at hamidulhaque.com — every page, form, and download on it. It explains what I collect, why, who else can see it, how long I keep it, and what you can ask me to do with it.

It does not cover other companies' websites I link to — those get their own note further down — or the separate written agreement that governs paid client projects, which is dealt with in your project contract.

I only receive personal information when you deliberately send it through one of three forms. Nothing on this site collects your details in the background.

Project enquiry form

When you fill in the form on the contact page, I receive your name and email address, and — if you choose to fill them in — your phone number, industry, the service you're after, your budget range, and your project brief. Name and email are the only required fields.

Newsletter signup

Your email address, and nothing else. No name, no company, no segmentation profile.

Template access request

When you request a file from the templates page, I receive your name, your email address, your stated reason for wanting it, and which template you requested.

Please don't send sensitive information — health details, financial account numbers, government ID numbers — through these forms. I don't need any of it, and none of these forms are built to hold it.

Like any website, the server that delivers these pages writes a standard access log. That log records your IP address, the browser and device you used, the page you asked for, the page you came from, and the time of the request. It's kept briefly, used to keep the site running and to investigate errors or abuse, and never used to build a profile of you.

Beyond that, there is currently no analytics or tracking software running on this site. No Google Analytics, no advertising pixels, no session recording, no heatmaps. If I add any of these later, I'll update this policy and the cookie banner before they start collecting anything.

The cookie banner you see on your first visit stores one thing, in your browser's local storage, under the key cookie-consent: the choice you made and when you made it. It stays on your device, is never sent to my server, and exists purely so the banner doesn't ask you again on every page.

The Analytics and Marketing toggles in that banner are there for tools I may add in future. As of the date at the top of this page, no such tools are installed, so neither toggle currently switches any tracking on or off.

To clear your choice, delete this site's data through your browser settings. The banner will then reappear on your next visit.

• To reply to your enquiry, scope the work, and quote for it.
• To send you the template file you asked for, and to decide whether to approve the request.
• To send you the newsletter, if you asked for it.
• To keep a record of who I've spoken to, so I'm not asking you the same questions six months later.
• To keep the site secure and working, and to investigate errors or abuse.
• To meet a legal or tax obligation, where one applies.

I don't sell your data, rent it, trade it, or hand it to advertisers. I don't add you to a newsletter because you filled in the enquiry form — those are separate, deliberate actions on your part. And I don't use your information to make automated decisions about you.

If you're in the UK, the EU, or somewhere with comparable data protection law, these are the legal bases I rely on:

• Consent — for the newsletter. You opted in, and you can opt out at any time.
• Steps toward a contract — for enquiry and template requests, where you approached me about working together or about a file you wanted.
• Legitimate interests — for keeping the site secure, keeping basic records of past conversations, and preventing abuse. I've weighed these against your privacy and kept the data minimal because of it.
• Legal obligation — where tax or accounting rules require me to keep a record.

A small number of service providers process data on my behalf so the site can function. Each one is bound by its own agreement to use the data only for the service it provides:

• Sanity — the content platform where form submissions and newsletter signups are stored.
• My email provider — carries my replies to you and, where relevant, the newsletter.
• Cal.com— only if you choose to book a call. Clicking “Book a Call” takes you to Cal.com's own site, where their privacy policy applies to whatever you enter there. Nothing is shared with them unless you go through that booking flow yourself.

Beyond that, I'd only disclose your information if the law required it, or if it were genuinely necessary to protect someone from harm or to defend a legal claim.

• Project enquiries — up to 24 months from our last contact, then deleted. If we work together, project records are kept for as long as tax and accounting rules require.
• Newsletter subscribers — until you unsubscribe, or until I close the newsletter.
• Template access requests — up to 12 months after the request is handled.
• Server logs — a short rolling window, typically a few weeks.

You don't have to wait for any of these windows to run out. Ask me to delete your data and I will, unless a law obliges me to keep a specific record.

You can ask me to:

• Tell you exactly what I hold about you, and give you a copy of it.
• Correct anything that's wrong or out of date.
• Delete it.
• Stop using it for a particular purpose, or restrict what I do with it.
• Hand it over in a portable format, or send it to someone else.
• Withdraw consent you gave earlier — which doesn't undo anything done before you withdrew it.

Email hello@hamidulhaque.com and I'll act on it within 30 days. There's no charge, and I won't make you justify the request. If I ever have to say no, I'll tell you which rule I'm relying on. If you think I've handled your data badly, you can also complain to the data protection authority where you live.

The site is served over HTTPS, so what you type into a form is encrypted in transit. Submissions land in an access-controlled system that only I can log into, and the providers I rely on are established platforms with their own security programmes.

That said, no website or storage system is perfectly secure, and I won't pretend otherwise. What I can promise is that I keep the amount of data I hold deliberately small, which is the most effective protection available to a business this size.

I'm based in Bangladesh, and the providers I rely on operate servers in various countries, so your information may be processed outside the country you live in — including outside the UK and EEA. Where that happens, I rely on those providers' own transfer safeguards, such as standard contractual clauses, to keep the data protected to a comparable standard.

This is a business site aimed at people hiring professional services. It's not intended for anyone under 16, and I don't knowingly collect their information. If you believe a child has sent me something through this site, email me and I'll delete it.

This site links out to other places — Cal.com for bookings, Dribbble, Behance, LinkedIn, X, Facebook, Instagram, and the occasional source or tool referenced in an article. Once you click through, you're on someone else's site under someone else's privacy policy. I have no control over what they collect and no visibility into it.

If I add a tool, change a provider, or start collecting something new, I'll update this page and change the date at the top. Substantial changes — a new category of data, a new purpose — will be flagged on the site itself rather than quietly edited in. Worth a glance whenever you send me something new.