Privacy Policy

Who I am

Zain Saeed is an independent senior WordPress and Shopify developer based in Lahore, Pakistan, operating zainsaeed.com as a solo practice. References to "I", "me" or "my" mean Zain Saeed; references to "you" mean the visitor or client.

You can reach me at info@zainsaeed.com or by WhatsApp at +92 339 233 6926 for any privacy-related question.

What information I collect

I collect only what is necessary to operate the Site, respond to enquiries, and deliver work for clients. Specifically:

• Contact details you submit through quote, contact or newsletter forms — name, email, phone or WhatsApp number, company, project brief.
• Communication you send me by email, WhatsApp, Slack or other channel during a project.
• Anonymous analytics about how visitors use the Site — pages viewed, country, browser, device — collected via Google Analytics 4 with IP anonymisation.
• Server log data (IP address, user-agent, request URL, timestamp) retained for up to 30 days for security and abuse prevention.
• Project files, credentials or data you share with me to deliver an engagement — only what is required, only for the duration of the project.

How I use information

• To reply to your enquiry and prepare a quote.
• To deliver work for paying clients — design, development, hosting setup, training, support.
• To send transactional or project-status emails. Marketing emails only go to people who opted in via a clearly-labelled newsletter form, and you can unsubscribe at any time.
• To measure traffic and improve the Site (aggregated, anonymous analytics).
• To comply with legal obligations, prevent fraud, and resolve disputes.

Who I share it with

I do not sell personal data. Period. The only parties that receive information are the service providers needed to run the Site and deliver client work:

• Hosting providers (Cloudways / DigitalOcean / Cloudflare) — process the requests that load the Site.
• Email infrastructure (Google Workspace / Postmark / Mailgun) — deliver email I send and receive.
• Analytics (Google Analytics 4) — aggregated, IP-anonymised usage data.
• Newsletter platform (Mailchimp / Klaviyo / ConvertKit, only if you opt in).
• Payment / invoicing tools (Wise, Payoneer, Stripe) when invoicing clients.
• Law enforcement or courts — only when legally required and only the minimum required.

Cookies

The Site uses a small number of essential cookies (session, language, consent state) and optional analytics cookies. Visitors in jurisdictions that require it are shown a consent banner; analytics cookies are not set until consent is given. See the separate Cookie Policy for the current list.

How long information is kept

• Quote / contact submissions — up to 24 months after our last contact, then deleted unless a project is active.
• Active project files — for the duration of the engagement plus 12 months for warranty / support.
• Newsletter subscriptions — until you unsubscribe.
• Server logs — up to 30 days.
• Accounting / invoicing records — kept for the period required by Pakistani tax law (currently 6 years).

Your rights

You can email info@zainsaeed.com to request any of the following at any time, free of charge:

• Access — get a copy of the personal data I hold about you.
• Correction — fix anything inaccurate.
• Deletion — have your data removed (subject to legal retention periods for invoicing).
• Restriction — limit how I process your data.
• Portability — get your data in a machine-readable format.
• Objection — withdraw consent for marketing or analytics at any time.
• Complaint — lodge a complaint with a supervisory authority in your country.

International transfers

I work with clients globally, so data may be processed in or transferred to countries outside your own — including the United States, the European Union, the United Kingdom and Pakistan. Where required (e.g. GDPR), I use Standard Contractual Clauses or equivalent safeguards to protect transfers.

Security

I take reasonable technical and organisational measures to protect your information — TLS in transit, encrypted backups, password managers, 2FA on every business-critical account, and least-privilege access for project credentials. No system is perfectly secure, however, and you should never send highly sensitive information by email without encryption.

Children's privacy

The Site is not directed at children under 13 and I do not knowingly collect data from them. If you believe a child has provided personal data, contact me and I will delete it.

Changes to this policy

I may update this Privacy Policy from time to time. Material changes will be flagged at the top of the page; the "Last updated" date will always reflect the most recent revision.