Privacy Policy

Who this policy covers

This Privacy Policy explains how istiquritconsultant.com ("this site," "we," "us") collects, uses, and protects information when you visit. This site is operated by Md. Istiqur Rahman. If you have questions about this policy, get in touch.

This site is a personal technology blog. It has no user accounts, no comments section, and no e-commerce functionality. The only way to submit information directly to this site is by subscribing to the email newsletter.

Information we collect

Information you provide directly

If you subscribe to the newsletter: your email address, and your name if the signup form requests it. This is collected and processed by our email service provider, ConvertKit, on our behalf.

Information collected automatically

Google reCAPTCHA runs when you submit the newsletter signup form, to help block spam and bot submissions. This sets a functional cookie — see the separate Cookie Policy for detail.
Google Analytics 4 runs on every page to measure overall site traffic and behavior (pages viewed, referring source, approximate location, device/browser type). It sets its own cookies — see the separate Cookie Policy for detail. We do not use GA4 for advertising, and we have not enabled any GA4 feature that shares data with Google Ads.
Standard technical logs kept by our web hosting provider (IP address, browser/device type, pages requested, timestamp), for security and operational purposes only — not analyzed individually, not shared with third parties beyond the host itself.
If you land on a page that no longer exists ("404 Not Found"), a small on-site log records the broken web address, the page that linked you there (if any), your browser type, and your IP address. This exists for one purpose only: finding broken links elsewhere on the internet that point here, so we can fix them. It is never analyzed for any other purpose, never shared with any third party, has no admin panel or web-accessible view of any kind, and is retained only until manually reviewed and cleared.

Not currently active on this site

We do not currently run the Meta (Facebook) Pixel, or any other advertising tool. If this changes, this policy — and the separate Cookie Policy — will be updated first, before the tool goes live.

Information we do not collect

We do not collect payment information — this site has no e-commerce functionality.
We do not have a contact form — there isn't one. Contact happens through the Contact page, which sends an email through your own email client; we only receive what you choose to write.
Google Search Console and Bing Webmaster Tools do not collect data about you as a visitor. They are tools we use to monitor how search engines crawl and index this site, verified via a meta tag or DNS record — no visitor tracking occurs through them.

How we use your information

Newsletter data (email, name): to send you the newsletter you signed up for, and for no other purpose. We do not sell, rent, or share your email address with third parties for their own marketing use.
reCAPTCHA: solely to keep spam/bot submissions out of the newsletter signup form. It does not identify you personally beyond that check.
Google Analytics 4: to understand overall traffic and which content is actually being read, so we can write more of what's useful. Data is viewed in aggregate — we don't look up individual visitors.

Where GDPR applies, we rely on:

Consent — for the newsletter signup itself, via double opt-in through ConvertKit.
Legitimate interest — for the reCAPTCHA cookie, which exists solely to prevent spam/bot form submissions and involves no advertising or profiling, and for Google Analytics 4, which measures site usage in aggregate and involves no advertising or cross-site profiling.

We do not currently run any advertising cookies, so there is nothing beyond the above to gate behind a consent choice today.

You have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict certain processing
Request a portable copy of your data
Withdraw consent at any time (this won't affect processing that already happened lawfully before withdrawal)
Lodge a complaint with your local data protection authority

This site's own data footprint is limited to what's listed above — we don't run a separate internal database of visitor information. In practice, exercising these rights mainly means acting on your entry in ConvertKit (or whichever third-party service actually holds the data in question), not something we can do from a self-service dashboard of our own. To exercise any of these rights, get in touch and we'll action it directly with the relevant service. For newsletter data specifically, every ConvertKit email also includes a self-service unsubscribe link.

Your rights (CCPA — California visitors)

If you are a California resident, you have the right to:

Know what personal information we collect and how it's used
Request deletion of your personal information
Opt out of the "sale" or "sharing" of personal information — we do not sell your personal information, and we don't currently run any advertising tool that would "share" it either.
Non-discrimination for exercising any of these rights

Cookies

This site does not currently use a cookie consent banner or popup — the cookies in use today are a functional one set by Google reCAPTCHA when you submit the newsletter signup form, and Google Analytics 4's own cookies, which measure aggregate site usage rather than track you individually for advertising. See the separate Cookie Policy for the full detail. If an advertising tool is added in future (which would set additional cookies), a consent mechanism will be added at that time, and this page will be updated first.

Third-party services

ConvertKit — email newsletter delivery. Their privacy policy: convertkit.com/privacy
Google reCAPTCHA — spam/bot protection on the newsletter form. Their privacy policy: policies.google.com/privacy
Google Search Console — search indexing, no visitor data. Their privacy policy: policies.google.com/privacy
Bing Webmaster Tools — search indexing, no visitor data. Their privacy policy: privacy.microsoft.com
Google Analytics 4 — aggregate site traffic/usage measurement, live on this site. Their privacy policy: policies.google.com/privacy
Meta (Facebook) Pixel — not currently active on this site. Listed here for transparency about future intent; this page will be updated first if it goes live.

International data transfers

Google and ConvertKit are US-based companies (or process data in the US). Where your data is transferred outside the EU/UK/Bangladesh, these providers rely on their own compliance mechanisms (such as Standard Contractual Clauses) — see their respective privacy policies linked above for details.

Children's privacy

This site is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information (e.g. via newsletter signup), get in touch and we will delete it.

Data retention

Newsletter data is retained for as long as you remain subscribed, and for whatever period after unsubscribing is set by ConvertKit's own data retention policy, unless you request earlier deletion.

Changes to this policy

We may update this Privacy Policy as the site's tools or practices change. The "last updated" date at the top will always reflect the most recent revision. Material changes will be noted on this page.