Pre-launch note. This notice is complete apart from the registered company details, the retention period and the supervisory authority, each marked below in square brackets. Those get filled in before the site is submitted for indexing.
The short version. This site sets no cookies and runs no advertising scripts. It counts page views, and only once you have accepted the notice shown on a first visit. The only personal data reaching Intelligentside is what a visitor chooses to type into the contact form or send by email, and it gets used to reply, for nothing else.
1. Who controls this data
Intelligentside, [registered company name], [company registration number], [registered address], acts as the data controller for personal data collected through intelligentside.com.
Reach the controller on +44 7848 174335 or at me@hashaamshahid.com.
2. What gets collected
| Data | Source | Why |
|---|---|---|
| Name, email address, and optionally company, phone number, enquiry topic and message | Typed into the contact form, or written in an email | To answer the enquiry and continue the conversation |
| IP address, timestamp, page requested, browser and device string | Recorded automatically by the hosting provider in its server logs | To keep the site running and to spot abuse |
| Page viewed, referring page, and coarse signals such as country, browser and device type | Vercel Web Analytics, and only for visitors who accept the measurement notice | To see which pages get read, so the site can be improved |
| Theme choice, and the answer given to the measurement notice | Stored inside your own browser | To keep the site looking the way you left it, and to stop the notice asking twice. Neither ever leaves the device |
3. What does not happen
- No selling, renting or trading of personal data, in any circumstances
- No advertising networks, no retargeting pixels, no social media trackers
- No profiling and no automated decision making
- No marketing list. An enquiry gets a reply, not a sequence of emails
- No cookies set by this site, as written in the cookie notice
- No measurement at all until a visitor accepts it, and no tracking across other websites
- No linking of page view data to an enquiry, or to any named person
4. Lawful basis
- Steps before a contract. Where an enquiry concerns possible work, the data gets processed to take steps at the enquirer's request.
- Legitimate interests. Answering a general question, keeping the site secure, and holding a record of correspondence. The interest is running a business, balanced against a visitor's reasonable expectation that a message sent gets read and answered.
- Consent. Page view measurement, and nothing else, relies on consent. It happens only where a visitor accepts the notice, and withdrawing is as simple as clearing site data in the browser, which makes the notice ask again.
5. Who else sees it
Three categories of processor may hold this data, each acting only on instruction:
- Hosting provider. Serves the site and keeps standard server logs
- Email provider. Carries and stores messages sent to the address above
- Form handler. Only where the contact form gets connected to one. While the form composes a message in your own mail app instead, no third party sees it at all
- Measurement provider. Vercel Inc., which operates Vercel Web Analytics, and only for visitors who accept the measurement notice
Nothing gets passed to any other party except where the law requires it.
6. How long it gets kept
Enquiry correspondence gets kept for [retention period, suggested 24 months] from the last contact, then deleted. Server logs get kept for the period set by the hosting provider, typically a short window measured in days. Page view measurement sits with the measurement provider under its own schedule, [measurement retention period, to confirm from the provider's documentation]. Ask for deletion of correspondence at any time and it gets actioned.
7. Where it goes
The hosting and email providers may process data beyond the United Kingdom and the European Economic Area. Where that happens, transfers rely on the safeguards those providers publish, such as standard contractual clauses or an adequacy decision.
8. Rights you hold
Subject to the conditions in the applicable data protection law, you may:
- Ask what personal data is held, and receive a copy
- Have inaccurate data corrected
- Have data erased
- Restrict or object to processing
- Receive the data in a portable format
- Withdraw consent, where consent is the basis relied on
Email me@hashaamshahid.com to exercise any of these. A response follows within one month. Unhappy with the result? A complaint may be raised with [supervisory authority, for a UK controller the Information Commissioner's Office].
9. Security
The site is served via HTTPS. Administrative accounts holding site or mail access use two-factor verification. No payment data gets collected anywhere on this site.
10. Changes
Any change to this notice appears here with a revised review date. Material changes affecting people who have already made contact get communicated directly.