Privacy
Privacy Policy
Last updated: 13 April 2026
Who I am
This site is operated by Farhan Malhi ("I", "me"), a consulting engineer based in Europe. If you have any questions about this policy or your data, email farhan.malhi@gmail.com.
What data I collect
- Contact form and chat widget submissions. Your name, email, and the message you send. Used only to reply to your enquiry.
- Analytics (with your consent). Google Analytics 4 and HubSpot record aggregated visit information: page views, browser, device, referring site, approximate location. Neither runs until you click Accept on the cookie banner.
- Visit notification (with your consent). After you click Accept, my site sends me a one-time email per browser session containing your approximate IP-level location (city / country), referring site, UTM parameters from the landing URL, browser user agent, language, screen size, and timezone. I use this to understand who is landing on the site in near-real-time so I can prepare a response if you later get in touch. Nothing is stored beyond my inbox.
- Performance telemetry. Vercel Analytics and Vercel Speed Insights record anonymous page view + Core Web Vitals data. Both run in cookieless mode and cannot be used to identify you personally.
- Local preferences.Your theme choice (light / dark) and your cookie consent decision are stored in your browser's
localStorage. These never leave your device.
Cookies I set
- Strictly necessary. Theme preference and cookie consent state, stored in
localStorage. No tracking value. - Analytics (optional). After you click Accept, GA4 sets
_gaand_ga_*. HubSpot sets__hstc,hubspotutk,__hssc, and__hssrc.
You can withdraw consent at any time via the Cookie settings link in the footer. Rejecting loads no third-party scripts.
Who processes your data
- Vercel, Inc. Site hosting, edge network, cookieless analytics. Vercel privacy policy.
- Resend. Delivers the email notification when you submit the contact form or chat with me. Resend privacy policy.
- Groq, Inc.Processes chat-widget messages to generate replies. Messages are sent to Groq's API but not stored by me server-side beyond the email notification. Groq privacy policy.
- Calendly.When you click a "Book a call" button, a Calendly popup loads on the page so you can pick a time without leaving the site. The popup is not loaded until you click it no Calendly cookies or network calls happen before your explicit action. Calendly privacy policy.
- Google (Analytics 4). Only after consent. Google privacy policy.
- HubSpot, Inc. Only after consent. HubSpot privacy policy.
How long I keep your data
Contact-form emails and chat transcripts live in my inbox and HubSpot CRM indefinitely unless you ask me to delete them. Analytics data retention follows each provider's default (GA4: 14 months; HubSpot: per plan).
Your rights (GDPR)
If you're in the EU, EEA, or UK, you have the right to:
- Request a copy of the personal data I hold on you.
- Ask me to correct, update, or delete that data.
- Withdraw cookie consent at any time.
- Lodge a complaint with your national data-protection authority.
To exercise any of these rights, email farhan.malhi@gmail.com and I'll respond within 30 days.
Changes to this policy
I may update this policy as the site evolves. The "Last updated" date at the top tells you when. For material changes (new processors, new tracking), I'll surface a notice via the cookie banner.