Privacy
Privacy policy
The short version: I collect only what you send me, use it only to reply and work with you, don't track you, and delete it when it's no longer needed.
Last updated: 18 September 2026
Who I am
This site belongs to Fahad Sabzwari, an independent software engineer based in Karachi, Pakistan. I'm responsible for the personal data described here (the "controller", in data protection terms). You can reach me about anything in this policy at hello@fahadsabzwari.com.
What I collect
- When you use the contact form: your name, email address, company or website if you give it, and your message.
- When you book a call: the details you enter on Cal.com, such as your name, email address, the time you pick and your answers to the booking questions.
- When you email me: whatever you choose to include.
- When you visit any page: Cloudflare, which hosts the site, processes technical data such as your IP address and browser details to deliver pages and protect the site from attacks. On the contact form, Cloudflare Turnstile uses similar signals to tell people from bots.
I don't use analytics, advertising or tracking tools, and I don't sell or share your data for marketing.
Why I use it, and on what basis
- To reply to you and discuss a possible project. This is a step you've asked me to take before any contract (UK and EU GDPR, Article 6(1)(b)).
- To keep track of enquiries so I can follow up and don't lose your message. This is in my legitimate interest in running my business (Article 6(1)(f)).
- To keep the site secure and stop spam. Also a legitimate interest (Article 6(1)(f)).
Where it's stored and who else handles it
Enquiries and bookings are kept in a private database that only I can open. These companies handle data on my behalf, each under its own privacy policy:
- Cloudflare: hosts the site and the enquiry database (stored in western Europe) and runs the spam check. Cloudflare's privacy policy (opens in a new tab)
- Resend: delivers contact form messages to my inbox. Resend's privacy policy (opens in a new tab)
- Namecheap: hosts my email. Namecheap's privacy policy (opens in a new tab)
- Cal.com: handles call bookings. Cal.com's privacy policy (opens in a new tab)
If we work together through Upwork, Upwork's own privacy policy also applies to what we share there.
International transfers
I work from Pakistan, and some of the companies above process data in the United States and other countries outside the UK and EU. Where they do, they rely on safeguards such as the standard contractual clauses approved by the European Commission and the UK's international data transfer addendum.
How long I keep it
- Enquiries that don't lead to work: deleted automatically 12 months after our last contact.
- Clients: kept for the length of our work together, then only as long as tax and accounting rules require.
- Emails: I delete enquiry emails on the same schedule.
Your rights
You can ask me to:
- send you a copy of the data I hold about you;
- correct anything that's wrong;
- delete your data;
- stop using it, or limit how I use it;
- send your data to you in a common format.
Email hello@fahadsabzwari.com and I'll respond within one month. I may ask you to confirm your identity first. These requests are free, wherever you live, including the US.
If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Office (opens in a new tab) in the UK, or to the data protection authority in your EU country (opens in a new tab). I'd appreciate the chance to fix it first.
Cookies
This site doesn't set any cookies of its own and doesn't use analytics. Cloudflare may use strictly necessary security signals to protect the site and run the spam check. Cloudflare says it uses Turnstile data only to detect bots, not to identify, profile or target you. Cal.com may set its own cookies when you open the booking page, which is covered by Cal.com's policy.
Changes to this policy
If I change how I handle your data, I'll update this page and the date at the top.