Who I am
This website is run by me, Toukir Ahmed Rony, a sole trader based in Huddersfield, England. I am the "controller" of the personal information described here. That means I decide how it is used and I am responsible for it.
- Email: toukirofficial1996@gmail.com
- Location: Huddersfield, England
If you have any question about this policy or your information, email me. I will reply within one month.
The short version
- You don't need an account, and there is no sign-up, newsletter or contact form.
- The site sets no cookies for visitors. The only thing it can save in your browser is your choice if you ask me to stop counting your visits.
- There are no adverts, no Google Analytics and no other third-party tracking. Scripts and fonts all load from this site.
- I count page visits myself, on my own server. I don't store your IP address with them.
- The site runs on a server in the UK.
What I collect and why
1. Visit statistics
What happens: when you open a page, your browser sends my server the information every browser sends with every request: your IP address, your browser and device type (the "user agent"), the page you opened and the website that linked you here (if any).
What I store: my server turns that into one short record of the visit:
- a random-looking visitor code, made by scrambling your IP address and browser details with a secret key. The key changes every calendar month, so the same person gets a different code each month and can't be followed from one month to the next.
- the page you viewed. I record the home page, the projects list and published project and product pages by name. Every other page is counted together as "other".
- the domain of the website that sent you here, for example linkedin.com. I don't keep the full link.
- your country. My server works this out from your IP address using a file stored on the server itself (the free DB-IP Lite country database). Your IP address is not sent to anyone to do this.
- your device type: mobile, tablet or desktop.
- the date and time.
What I don't store: I don't save your IP address with the visit. For up to 1 hour my server keeps your IP address (or, for IPv6, the first half of it) in temporary memory, only to stop one address flooding the counter. For 30 minutes it keeps your visitor code and the page you opened, so reloading a page isn't counted twice. After that these temporary records delete themselves.
Search engine robots, link previews and my own visits while I'm signed in are not counted.
Why: to see which projects and pages people find useful, where visitors come from and which devices they use, so I can improve the site. I only look at totals. I don't use this information to identify you or make any decision about you.
Lawful basis: legitimate interests. I have a legitimate interest in understanding how my site is used. The records are minimal, scrambled and kept on my own server, so I believe this doesn't override your privacy. You can object at any time: use Stop counting my visits or email me.
How long: each visit record is deleted automatically after 400 days.
2. Server logs
What happens: like almost every website, my web server writes a log line for each request: IP address, date and time, the address requested, the result, the referring page and the user agent.
Why: to keep the site secure (for example, to spot attacks or abuse) and to find and fix faults.
Lawful basis: legitimate interests in keeping the site secure and working.
How long: logs are deleted automatically after 7 days.
3. When you contact me
The site shows my email address, phone number and a WhatsApp link. If you use them, I receive whatever you send, usually your name, your email address or phone number, your message and anything you attach. If you are a recruiter or a potential client, that may include details of a role or a project.
Why: to reply to you, to talk about a job or a project and, if we agree to work together, to take the steps needed to start.
Lawful basis: legitimate interests in replying to people who contact me, or, where you ask about hiring me or working with me, taking steps at your request before entering into a contract.
How long: I keep your messages for as long as needed to deal with your enquiry and any work that follows, then delete them, unless the law requires me to keep something longer (for example, invoices for tax purposes).
These messages don't pass through this website. They go straight to the service you choose:
- Email goes to my Gmail inbox, provided by Google.
- WhatsApp messages are handled by WhatsApp (Meta). WhatsApp's own privacy policy applies to how it handles your messages and account.
- Phone calls and texts go through my mobile network.
4. Downloading my CV
Downloading my CV doesn't need any details from you. The download is recorded only in the server logs described above.
5. People who recommended me
The site shows recommendations from clients and colleagues. For each one I show the person's name, job title, our working relationship, the project (if any), their words and, in some cases, a link to their LinkedIn profile. The person gave the recommendation to me or wrote it as a LinkedIn recommendation.
Lawful basis: legitimate interests in showing genuine recommendations of my work.
How long: for as long as the recommendation is on the site. If you gave me a recommendation and want it changed or removed, email me and I will do it promptly.
Do you have to give me any information?
No. You can use the whole site without giving me any details. Your browser sends the technical information described above automatically, because websites can't work without it. Contacting me is optional; if you don't, I just won't be able to reply to you.
Who receives your information
I don't sell your information or share it for advertising. Only these organisations handle it, and only to provide their service:
- Hostinger International Ltd hosts the server that runs this site, including the visit records, server logs and database. The server is in Manchester, UK.
- Google (Gmail) provides my email inbox, if you email me.
- WhatsApp (Meta) carries your messages, if you choose to use WhatsApp. WhatsApp is responsible for its own service under its own terms.
I may also share information if the law requires it, for example with the police or a court.
Links on the site to LinkedIn, GitHub, Instagram, Facebook and client websites take you to sites run by others. Their own privacy policies apply once you're there.
Transfers outside the UK
The website and everything it stores stay on a server in the UK.
If you email me, Google may store or process the email outside the UK. Google's privacy policy explains where it processes data and how it protects it. WhatsApp handles messages under its own terms and privacy policy.
How I keep it safe
The site only works over an encrypted (HTTPS) connection. Only I can sign in to the server and to the site's admin area, and visit records are stored without IP addresses. No method of storage or transfer is completely secure, but I take reasonable steps to protect your information.
Backups
Copies of the site's database, which includes the visit records and recommendations, are kept on the same server so the site can be restored if something goes wrong. There are no backups anywhere else. I delete old copies when they are no longer needed.
Your rights
Under UK data protection law you have the right to:
- access: ask for a copy of the personal information I hold about you
- correction: ask me to fix information that is wrong or incomplete
- deletion: ask me to delete your information
- restriction: ask me to stop using your information for a while, for example while we sort out a question about it
- objection: object to my use of your information based on legitimate interests, including the visit statistics
- portability: ask for information you gave me in a format you can reuse, where this applies
- withdrawing consent: where I rely on your consent, withdraw it at any time. This doesn't affect anything done before you withdrew it.
To use any of these rights, email toukirofficial1996@gmail.com. It's free. I will reply within one month. If I need to confirm who you are, I'll ask.
Visit records only hold a scrambled code, so I usually can't tell which ones are yours. If you want me to find your records, I may need you to tell me roughly when you visited and from which device.
Automated decisions
None. I don't make any decisions about people by automated means, and I don't build profiles.
Children
This site is a professional portfolio and is not aimed at children.
Complaints
If you're unhappy with how I've handled your information, please tell me first and I'll try to put it right.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection: ico.org.uk/make-a-complaint or 0303 123 1113.
Changes to this policy
If I change how I use personal information, I'll update this page and the "Last updated" date.