Skip to main content
Menu
Privacy

Privacy Policy

Last updated: 13 April 2026

Who I am

This site is operated by Farhan Malhi ("I", "me"), a consulting engineer based in Europe. If you have any questions about this policy or your data, email farhan.malhi@gmail.com.

What data I collect

  • Contact form and chat widget submissions. Your name, email, and the message you send. Used only to reply to your enquiry.
  • Analytics (with your consent). Google Analytics 4 and HubSpot record aggregated visit information: page views, browser, device, referring site, approximate location. Neither runs until you click Accept on the cookie banner.
  • Visit notification (with your consent). After you click Accept, my site sends me a one-time email per browser session containing your approximate IP-level location (city / country), referring site, UTM parameters from the landing URL, browser user agent, language, screen size, and timezone. I use this to understand who is landing on the site in near-real-time so I can prepare a response if you later get in touch. Nothing is stored beyond my inbox.
  • Performance telemetry. Vercel Analytics and Vercel Speed Insights record anonymous page view + Core Web Vitals data. Both run in cookieless mode and cannot be used to identify you personally.
  • Local preferences.Your theme choice (light / dark) and your cookie consent decision are stored in your browser's localStorage. These never leave your device.

Cookies I set

  • Strictly necessary. Theme preference and cookie consent state, stored in localStorage. No tracking value.
  • Analytics (optional). After you click Accept, GA4 sets _ga and _ga_*. HubSpot sets __hstc, hubspotutk, __hssc, and __hssrc.

You can withdraw consent at any time via the Cookie settings link in the footer. Rejecting loads no third-party scripts.

Who processes your data

  • Vercel, Inc. Site hosting, edge network, cookieless analytics. Vercel privacy policy.
  • Resend. Delivers the email notification when you submit the contact form or chat with me. Resend privacy policy.
  • Groq, Inc.Processes chat-widget messages to generate replies. Messages are sent to Groq's API but not stored by me server-side beyond the email notification. Groq privacy policy.
  • Calendly.When you click a "Book a call" button, a Calendly popup loads on the page so you can pick a time without leaving the site. The popup is not loaded until you click it no Calendly cookies or network calls happen before your explicit action. Calendly privacy policy.
  • Google (Analytics 4). Only after consent. Google privacy policy.
  • HubSpot, Inc. Only after consent. HubSpot privacy policy.

How long I keep your data

Contact-form emails and chat transcripts live in my inbox and HubSpot CRM indefinitely unless you ask me to delete them. Analytics data retention follows each provider's default (GA4: 14 months; HubSpot: per plan).

Your rights (GDPR)

If you're in the EU, EEA, or UK, you have the right to:

  • Request a copy of the personal data I hold on you.
  • Ask me to correct, update, or delete that data.
  • Withdraw cookie consent at any time.
  • Lodge a complaint with your national data-protection authority.

To exercise any of these rights, email farhan.malhi@gmail.com and I'll respond within 30 days.

Changes to this policy

I may update this policy as the site evolves. The "Last updated" date at the top tells you when. For material changes (new processors, new tracking), I'll surface a notice via the cookie banner.