PRIVACY POLICY

Last Updated: October 16, 2025

This Privacy Policy describes how Mirwais Portfolio Website ("we," "us," or "our") collects, uses, stores, and protects your personal information when you visit and use our website ("Services"). This policy complies with the General Data Protection Regulation (GDPR) in the European Union, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) in the United States, and the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada.

Contact: If you have questions or concerns, please contact us at [email protected].

SUMMARY OF KEY POINTS

Information We Collect: Name, email address, IP addresses, browsing data
How We Use It: To respond to inquiries, improve services, ensure security
Sharing: With service providers (Google Analytics, hosting), as required by law
Your Rights: Access, rectification, erasure, data portability, objection
Cookies: We use necessary and optional cookies; you can manage preferences
Data Retention: Kept only as long as necessary

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR INFORMATION?
3. LEGAL BASES FOR PROCESSING
4. WHEN DO WE SHARE YOUR INFORMATION?
5. COOKIES AND TRACKING TECHNOLOGIES
6. HOW LONG DO WE KEEP YOUR INFORMATION?
7. HOW DO WE KEEP YOUR INFORMATION SAFE?
8. YOUR PRIVACY RIGHTS
9. UNITED STATES PRIVACY RIGHTS
10. CALIFORNIA PRIVACY RIGHTS
11. CANADIAN PRIVACY RIGHTS
12. CHILDREN'S PRIVACY
13. INTERNATIONAL DATA TRANSFERS
14. POLICY UPDATES
15. CONTACT US

1. WHAT INFORMATION DO WE COLLECT?

Personal Information You Provide

We collect information you voluntarily provide:

Names
Email addresses
Message content (from contact forms)
Any other information you choose to provide

Sensitive Information: We do not collect sensitive personal information.

Automatically Collected Information

When you visit our Services, we automatically collect:

Log Data: IP address, browser type, operating system, pages visited, timestamps
Device Data: Device type, screen resolution, language settings
Location Data: General location based on IP address (not precise geolocation)

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your information to:

Respond to contact form inquiries
Provide, maintain, and improve our Services
Send blog updates and service notifications (with consent)
Analyze usage patterns and optimize user experience
Detect and prevent fraud and security threats
Comply with legal obligations

3. LEGAL BASES FOR PROCESSING

For EU/UK/Swiss Residents (GDPR)

We process your data based on:

Consent: For marketing communications and optional cookies
Legitimate Interests: For website analytics, security, and service improvement
Legal Obligations: To comply with laws and regulations

For Canadian Residents (PIPEDA)

We process your data with your consent (express or implied) or where permitted by law.

For U.S. Residents

We process your data based on consent, legitimate interests, or legal requirements.

4. WHEN DO WE SHARE YOUR INFORMATION?

We may share your information with:

Service Providers:
- Google Analytics (website analytics)
- Netlify or similar (website hosting)
- FormSubmit (contact form processing)
Legal Compliance: When required by law or to protect our rights
Business Transfers: In connection with mergers or acquisitions (with notice)

We do not sell your personal information.

5. COOKIES AND TRACKING TECHNOLOGIES

We use cookies to enhance your experience and analyze usage:

Types of Cookies

Strictly Necessary: Essential for website functionality (always active)
Analytics (Optional): Google Analytics to understand usage patterns
Functionality (Optional): Remember your preferences

Managing Cookies

You can also manage cookies through your browser settings.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain information only as long as necessary:

Contact form data: Up to 2 years after last interaction
Analytics data: Up to 26 months (Google Analytics default)
Server logs: Up to 90 days
Cookie data: Varies by type (session cookies deleted when browser closes)

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

Our security measures include:

HTTPS/SSL encryption for data transmission
Secure hosting with reputable providers
Limited access to personal information
Regular security reviews
Data minimization practices

Note: While we implement robust security, no system is 100% secure.

8. YOUR PRIVACY RIGHTS

EU/UK/Swiss Residents (GDPR Rights)

You have the right to:

Access: Request a copy of your personal information
Rectification: Correct inaccurate data
Erasure: Request deletion of your data
Restriction: Limit how we process your data
Data Portability: Receive your data in a portable format
Object: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent at any time
Lodge a Complaint: File a complaint with your data protection authority

Supervisory Authorities:

9. UNITED STATES PRIVACY RIGHTS

U.S. state privacy laws (California, Virginia, Colorado, Connecticut, Utah) provide residents with rights including:

Right to know what personal information is collected
Right to access your personal information
Right to correct inaccurate information
Right to delete your personal information
Right to opt out of sale/sharing (we don't sell data)
Right to non-discrimination for exercising rights

10. CALIFORNIA PRIVACY RIGHTS

CCPA/CPRA Rights

California residents have specific rights under the CCPA and CPRA:

Right to Know: Categories and specific pieces of personal information collected
Right to Delete: Request deletion of personal information
Right to Correct: Correct inaccurate data
Right to Opt-Out: We do not sell personal information
Right to Non-Discrimination: No discrimination for exercising rights

How to Exercise Your Rights

Verification

We will verify your identity before processing requests to protect your information.

Authorized Agents

You may designate an authorized agent. We may require proof of authorization.

11. CANADIAN PRIVACY RIGHTS

PIPEDA Rights

Canadian residents have the right to:

Access your personal information
Correct inaccurate information
Withdraw consent for processing
Know how information is used and disclosed
File a complaint with the Privacy Commissioner of Canada

PIPEDA Principles

We adhere to PIPEDA's fair information principles including:

Accountability for personal information
Identifying purposes for collection
Obtaining consent
Limiting collection to necessary information
Maintaining accuracy
Protecting information with safeguards
Transparency about practices
Providing access upon request

Contact the Office of the Privacy Commissioner of Canada for complaints.

12. CHILDREN'S PRIVACY

Our Services are not directed to individuals under 16 (or 13 in the U.S.). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately, and we will delete it.

13. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries with different data protection laws. For EU/EEA data transfers, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

14. POLICY UPDATES

We may update this Privacy Policy periodically. The updated version will be indicated by a revised "Last Updated" date. For material changes, we will provide prominent notice on our website or email notification.

15. CONTACT US

For questions about this Privacy Policy or to exercise your rights, contact us:

Email: [email protected]
Location: Hamburg, Germany
Contact Form: Available on our website

How to Submit Requests

To access, update, or delete your data:

Email [email protected] with your request
Specify the type of request (access, correction, deletion)
Provide sufficient information to verify your identity

Response Times

GDPR (EU/UK): Within 1 month (extendable by 2 months)
CCPA (California): Within 45 days (extendable by 45 days)
PIPEDA (Canada): Within 30 days

Consent Withdrawal: To withdraw consent, email us or adjust your .