Privacy Policy

Last updated: 12 September 2026

This privacy notice explains how Danish Khan, the operator of this portfolio website, handles personal information. For any privacy question or request, use the contact form.

Information this website collects

When you send a contact enquiry, the website stores your name, email address, message, IP address and submission time. This information is used to read, manage and reply to your enquiry, prevent abuse and keep the website secure.

If comments are enabled on a journal post and you submit one, the website stores your display name, email address, comment, submission time and protected identifiers derived from your email and IP address. Your email is encrypted in storage. Your display name and an approved comment may be shown publicly; your email address is never published. A private edit token lets you amend a submitted comment.

If you use a like button, the website stores a random reader cookie and a protected identifier so it can remember the like without asking for your identity.

Lawful basis and purposes

Enquiries are processed to take steps at your request and for the legitimate interests of responding to professional enquiries, maintaining records and protecting the website from spam or misuse. Comments and likes are processed for the legitimate interests of operating an optional public discussion and measuring reader response. Optional analytics are based on consent.

Cookies and local storage

gtv_session is a session cookie used for security, form validation and temporary messages. It expires when the browser session ends. blog_reader is set only when a reader uses a like button and lasts for up to one year. It contains a random value rather than a name or email address.

If Google Analytics is enabled, it does not load until you choose “Allow analytics”. Your choice is saved in browser local storage as analytics-consent. You can clear site data in your browser to reset that choice. Google may then process usage and device information under its own privacy terms. Analytics is currently disabled unless the consent panel appears.

Service providers and transfers

Information is stored with the website's database and hosting provider. Contact messages may be sent through the email provider configured for the website. If an anti-spam challenge appears, its named provider (Cloudflare Turnstile, hCaptcha or Google reCAPTCHA) may receive technical information needed to verify the request. Optional Google Analytics may process analytics data. These providers act under their own terms and may process information outside the UK using the safeguards they make available.

The website does not sell personal information. Information is disclosed only when needed to operate these services, protect the website, comply with law, or establish or defend legal rights.

Retention and security

Contact enquiries are kept only while they are needed to answer the enquiry, maintain an appropriate business record, resolve a dispute or meet a legal obligation, and are then deleted. Pending, rejected or spam comments are periodically reviewed and removed when no longer needed for moderation or abuse prevention. Approved comments remain with the relevant article until the article or comment is removed. Like records remain until the like is withdrawn, the related article is removed, or the data is no longer needed.

Reasonable technical measures include restricted administration access, CSRF protection, rate limiting, secure session settings, encryption of comment email addresses and hashing of comment and like identifiers. No internet service can guarantee absolute security.

Your rights

Depending on the circumstances, UK data protection law may give you rights to access, correct or erase your information; restrict or object to its use; receive portable data; and withdraw consent where consent is the lawful basis. You may object at any time to processing based on legitimate interests. Use the contact form to make a request. Identity may need to be verified before a request is completed.

You can also complain to the UK Information Commissioner's Office through ico.org.uk. Please contact Danish first if you would like an opportunity to resolve the concern directly.

Changes to this notice

This notice will be updated when the website's data practices change. The latest revision date appears at the top of this page.