Legal

Privacy Policy

Last updated: April 12, 2026

1. Introduction

This Privacy Policy describes how Aasif Ashraf ("I", "my", or "this website") collects, uses, and shares your personal information when you visit this portfolio website hosted at https://www.aasifashraf.dev.

For the purposes of this policy, I am the data controller responsible for your personal data. You can contact me at [email protected].

2. Information I Collect

When you visit this website, I may collect the following information:

  • Log data: Your IP address, browser type, operating system, referring pages, and pages visited.
  • Contact information: Name, email address, company name, and message content if you choose to reach out via the contact form.
  • Analytics data: Anonymous usage data through Google Analytics and Vercel Analytics to help improve the website experience.

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), I process your personal data on the following legal bases:

  • Consent (Article 6(1)(a)): When you submit the contact form, I process your data based on your explicit consent.
  • Legitimate Interest (Article 6(1)(f)): I process analytics data to understand usage patterns and improve the website experience. This does not override your fundamental rights and freedoms.
  • Contractual Necessity (Article 6(1)(b)): If you contact me regarding a potential business engagement, I process your data to take steps prior to entering a contract.

4. How I Use Your Information

  • To respond to inquiries sent through the contact form.
  • To analyze website traffic and improve user experience.
  • To maintain and secure the website.
  • To communicate with you regarding potential professional opportunities.

5. Data Retention

I retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

  • Contact form submissions: Retained for 12 months from the date of submission, after which they are permanently deleted unless a professional relationship is established.
  • Analytics data: Google Analytics data is retained for 14 months (the minimum period offered by Google).
  • Server logs: Vercel platform logs are retained for 10 days before automatic deletion.

6. Cookies & Third-Party Services

This website uses the following third-party services, each with its own privacy policy:

  • Google Analytics (gtag.js): Collects anonymous usage statistics. Google may set cookies such as _ga, _gid, and _gat. These are first-party analytics cookies used solely for statistical purposes. Google's privacy policy: https://policies.google.com/privacy
  • Vercel Analytics & Speed Insights: Collects anonymous performance and usage data to monitor website health. Vercel's privacy policy: https://vercel.com/legal/privacy-policy

This website does not use advertising cookies, tracking pixels, or sell any personal data. You can control cookie preferences through your browser settings.

7. International Data Transfers

This website is hosted on Vercel Inc., which uses infrastructure located primarily in the United States. When you access this website from outside the United States, your data may be transferred to servers outside your country.

Such transfers are subject to appropriate safeguards, including Standard Contractual Clauses (SCCs) adopted by the European Commission or adequacy decisions where applicable. By using this website, you acknowledge and consent to such transfers.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data:

  • Right of Access (Article 15): Request a copy of the personal data I hold about you.
  • Right to Rectification (Article 16): Request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten").
  • Right to Restrict Processing (Article 18): Request that I limit how I use your personal data.
  • Right to Data Portability (Article 20): Request transfer of your personal data in a machine-readable format.
  • Right to Object (Article 21): Object to processing based on legitimate interest.
  • Right to Withdraw Consent (Article 7): Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact me at [email protected]. I will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK).

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what categories of personal information I collect and the purposes for which it is used.
  • Request deletion of your personal information.
  • Opt out of the "sale" or "sharing" of personal information. I do not sell or share any personal information.
  • Not be discriminated against for exercising any of these rights.

To make a request, please contact me at [email protected].

10. Children's Privacy

This website is not intended for children under the age of 13 (or 16 in certain jurisdictions). I do not knowingly collect personal information from children. If you believe a child has provided personal data through this website, please contact me immediately so I can take appropriate action.

11. Automated Decision-Making

I do not use automated decision-making, profiling, or algorithmic evaluation of personal data in connection with this website.

12. Data Security

I take reasonable measures to protect your personal information, including HTTPS encryption for all data transmission and secure hosting through Vercel's infrastructure. However, no method of transmission over the internet is 100% secure, and I cannot guarantee absolute security.

13. Changes to This Policy

I may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. I encourage you to review this policy periodically.

14. Contact

If you have any questions about this Privacy Policy or wish to exercise your data rights, please reach out via the Contact page or email me directly at [email protected].