Privacy Policy | Qamar Nomani

This Privacy Policy explains how Qamar Nomani(“I,” “me,” or “my”) collects, uses, stores, and protects information about visitors to and users of qamarnomani.com(the “Website”). It also describes your rights in relation to your personal data.

I am committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner. This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the California Consumer Privacy Act (CCPA), where applicable.

If you have questions about this policy, contact me at hello@qamarnomani.com.

1. Data Controller

The data controller for personal data collected through this Website is Qamar Nomani. For the purposes of data protection law, I operate as an independent individual and sole data controller.

Contact: hello@qamarnomani.com

2. Information I Collect

I collect the following categories of data:

Information you provide directly

Email address — when you subscribe to my newsletter via the subscription form on the Website
Name (if provided) — when you contact me via email or a contact form
Message content — any correspondence you send to me directly

Information collected automatically

Usage data — pages visited, time spent, referral source, browser type, operating system, and device type, collected via analytics tools
IP address — anonymised or truncated where technically possible
Cookie data — see the Cookie Policy for full details

I do not collect sensitive personal data (special categories) such as health information, biometric data, racial or ethnic origin, religious beliefs, or financial account details.

3. How I Use Your Information

I use the personal data I collect for the following purposes:

Newsletter delivery — sending infrequent articles, insights, and updates to subscribers who have explicitly opted in
Website analytics — understanding how the Website is used to improve content, navigation, and performance
Responding to enquiries — replying to messages sent to me via email or contact forms
Legal compliance — meeting obligations under applicable data protection, tax, or other laws

I do not use your data for automated decision-making, profiling, or targeted advertising.

4. Legal Basis for Processing (GDPR)

Under the UK GDPR and EU GDPR, I process your personal data on the following legal grounds:

Consent — for newsletter subscriptions and analytics cookies, where you have given explicit, freely given, specific, and informed consent
Legitimate interests — for basic Website analytics to understand performance, provided this does not override your fundamental rights and freedoms
Legal obligation — where processing is necessary to comply with a legal requirement

You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Newsletter Subscriptions

If you subscribe to my newsletter, your email address is stored securely with my email service provider. Subscription constitutes your consent to receive periodic content from me. Each email includes a clearly visible unsubscribe link. You may also request removal at any time by emailing hello@qamarnomani.com.

I do not share subscriber email addresses with any third party for marketing purposes.

6. Cookies & Analytics

This Website uses cookies and similar tracking technologies to collect anonymous usage statistics. Analytics data helps me understand which content resonates with readers and how to improve the Website experience. No personally identifiable information is included in analytics reports.

For a detailed breakdown of cookies used, how they work, and how to manage your preferences, please read the Cookie Policy.

7. Data Sharing & Third Parties

I do not sell, rent, or trade your personal data. I may share limited data with the following trusted service providers who process data on my behalf, subject to data processing agreements:

Email service provider — for newsletter management and delivery
Analytics provider — for aggregated, anonymised Website usage statistics
Hosting and CDN provider — for Website delivery and performance (Cloudflare)

Each third-party service provider is required to maintain appropriate security measures and may only process your data for the specific purposes I have authorised.

I may also disclose data if required by law, a court order, or a lawful request from a competent regulatory or governmental authority.

8. International Data Transfers

Some third-party service providers used to operate this Website may process data outside the UK or European Economic Area (EEA). Where this occurs, I ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the relevant authority, to protect your data to a standard equivalent to that required within the UK and EU.

9. Data Retention

I retain your personal data only for as long as necessary for the purposes described in this policy:

Newsletter subscriber data — retained until you unsubscribe or request deletion
Correspondence data — retained for up to 24 months, then deleted unless an ongoing professional relationship requires otherwise
Analytics data — retained in anonymised or aggregated form; session-level data is typically retained for 14 months

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Under UK GDPR / EU GDPR

Right of access — request a copy of the personal data I hold about you
Right to rectification — request correction of inaccurate or incomplete data
Right to erasure (“right to be forgotten”) — request deletion of your data where there is no overriding legitimate reason to retain it
Right to restrict processing — request that I limit how I use your data in certain circumstances
Right to data portability — receive your data in a structured, commonly used, machine-readable format
Right to object — object to processing carried out on the basis of legitimate interests
Right to withdraw consent — where processing is based on consent, withdraw it at any time

Under CCPA (California Residents)

Right to know — the categories and specific pieces of personal information collected about you
Right to delete — request deletion of personal information collected from you
Right to opt out — opt out of the sale of personal information (note: I do not sell personal information)
Right to non-discrimination — exercise your privacy rights without receiving discriminatory treatment

To exercise any of these rights, contact me at hello@qamarnomani.com. I will respond to verifiable requests within 30 days (UK/EU GDPR) or 45 days (CCPA). I may request proof of identity before processing your request to protect your data.

If you are in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EU, you may contact the supervisory authority in your member state.

11. Children's Privacy

This Website is not directed at children under the age of 13, and I do not knowingly collect personal data from anyone under 13. If I become aware that personal data has been collected from a child without appropriate consent, I will take immediate steps to delete that data. If you believe a child has submitted personal data to this Website, please contact me at hello@qamarnomani.com.

12. Security

I implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure. I cannot guarantee the absolute security of data transmitted to or through this Website.

13. Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes in applicable law, third-party services, or data practices. The “Last updated” date at the top of this page indicates when the policy was most recently revised. Where changes are material, I will endeavour to notify newsletter subscribers. Continued use of the Website after any revision constitutes acceptance of the updated policy.

14. Contact

For any privacy-related questions, requests, or concerns, please contact: hello@qamarnomani.com.

Data Controller: Qamar Nomani