Privacy Policy

Last updated: April 2026

This Privacy Policy explains how Muhammad Nadeem Khan ("I", "me") collects, uses, and protects personal data when you visit khan.ae. I am committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the UAE Personal Data Protection Law (PDPL).

1. Data Controller

Muhammad Nadeem Khan
Dubai, United Arab Emirates
nadeem@khan.ae

2. Data I Collect

Contact form submissions — when you use the contact form, I collect:

Your name and email address
Your message
Your IP address, browser, language preference, and referrer (for spam detection)
Approximate location derived from IP address (country, city, region, ISP)

Analytics — with your consent, Google Analytics 4 collects:

Pages visited and time spent
Device type, browser, and operating system
General geographic location (country/city level)

Security (reCAPTCHA Enterprise) — the contact form is protected by Google reCAPTCHA Enterprise, which collects hardware and software information to distinguish human visitors from bots. This processing is necessary to protect the site from spam.

3. How I Use Your Data

Contact submissions: to read and respond to your message.
Analytics: to understand how the site is used and improve it over time.
reCAPTCHA: to protect the contact form from automated abuse.

4. Legal Basis

Analytics (GA4): your consent (you may decline via the cookie banner).
reCAPTCHA: legitimate interest — necessary to secure the contact form.
Contact form responses: legitimate interest — responding to your enquiry.

5. Third-Party Services

I use the following Google services. Each is governed by Google's Privacy Policy:

Google Analytics 4 — analytics.google.com
Google reCAPTCHA Enterprise — cloud.google.com/recaptcha

No data is sold or shared with any other third party.

6. Cookies

This site uses cookies only when you consent to analytics. Google Analytics sets the following cookies:

_ga — distinguishes users; expires after 2 years.
_ga_* — stores session state; expires after 2 years.

If you decline analytics, no tracking cookies are set. You can withdraw consent at any time by clearing your browser's local storage for this site.

7. Data Retention

Contact messages: retained for up to 12 months.
Analytics data: per Google's retention settings (14 months by default).

8. Your Rights

Depending on your location, you may have the right to:

Access the personal data I hold about you
Request correction or deletion of your data
Withdraw consent for analytics at any time
Lodge a complaint with your local data protection authority

To exercise any of these rights, contact me at nadeem@khan.ae.

9. Changes to This Policy

I may update this policy occasionally. The "Last updated" date at the top of this page will always reflect the most recent revision.