Privacy, explained clearly

Your information deserves straight answers.

This policy explains what Dev By Ghani collects through this website, why it is used, who may receive it and the choices available to you.

Last updated 12 September 2026 UK privacy notice
Respect by design

I collect only what is reasonably needed to respond, deliver services, protect the website and understand its performance.

No sale of personal information
Plain-language summary

When you contact Dev By Ghani, the details you provide are used to understand and respond to your enquiry. Technical and usage information may also be processed to keep the website secure, measure performance and understand advertising. Personal information is not sold.

01

Who is responsible for your information?

Usman Ghani, trading as Dev By Ghani, is the controller responsible for personal information processed through this website and in connection with enquiries and client services.

Privacy enquiriesadmin@devbyghani.co.uk
02

Information that may be collected

The information collected depends on how you use the website and whether you become a client.

Enquiry information

Name, business name, email address, telephone or WhatsApp number, budget, timeframe, project requirements and anything else you include in a message.

Client and project information

Correspondence, quotations, contracts, invoices, payment records, supplied content, account details and technical information required to deliver and support agreed services.

Technical information

IP address, browser and device information, approximate location, requested pages, timestamps, referring pages, error information and security logs.

Usage and advertising information

Page views, interaction and conversion events, campaign information and identifiers created by analytics, advertising or measurement technologies.

Do not send passwords, payment-card details, special-category information or confidential material through the general enquiry form unless specifically requested through an appropriate secure method.

03

Why information is used and the lawful basis

PurposeTypical lawful basis
Responding to enquiries and preparing quotationsUnderstanding your requirements, contacting you and discussing possible work.Legitimate interests in responding to business enquiries and, where relevant, taking steps at your request before entering a contract.
Delivering and supporting client servicesManaging projects, hosting, domains, communication, billing and support.Performance of a contract and steps connected with entering a contract.
Operating and securing the websitePreventing abuse, diagnosing errors, maintaining backups and protecting systems.Legitimate interests in running a reliable and secure website.
Analytics and advertising measurementUnderstanding visits, campaigns and actions such as form submissions or WhatsApp clicks.Consent where required for non-essential cookies or similar technologies.
Legal, accounting and dispute requirementsKeeping records, complying with obligations and establishing or defending legal claims.Legal obligation and legitimate interests.

Your right to object: where processing relies on legitimate interests, you may object based on your particular situation. The request will be considered unless compelling legitimate grounds or legal-claims requirements apply.

04

Who may receive information?

Information is shared only where reasonably necessary for the purposes described above, to deliver an agreed service, or where disclosure is legally required. Categories may include:

  • Website, server, domain, backup and email-service providers
  • Stripe, which securely collects card details and returns payment status, transaction references and limited billing details; Dev By Ghani does not receive or store full card numbers
  • Google services used for Analytics, Ads measurement and reCAPTCHA
  • OpenAI measurement technology used to understand website interactions
  • WhatsApp/Meta when you choose to contact through WhatsApp
  • Telegram where enquiry notifications are delivered securely to the site owner
  • Professional advisers, payment providers, regulators, courts or public authorities where appropriate
  • A replacement supplier or purchaser if a business transfer occurs, subject to appropriate confidentiality and data-protection requirements

Website Store orders also record the selected product, package, add-ons, project requirements, order status, amount and Stripe transaction identifiers so the contract, payment and delivery can be administered. Service providers are expected to process information only for authorised purposes and apply appropriate protection. Personal information is not rented or sold.

05

Cookies and similar technologies

Cookies and related technologies can store or read information on your device. The website may use the following categories:

Where UK law requires consent for non-essential cookies or similar technologies, those technologies should be used only after a valid choice. You can also remove or block cookies using browser settings, although this may affect some functionality.

06

How long information is kept

Information is kept only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute requirements. Typical periods are:

  • Enquiries

    Normally up to 24 months after the last meaningful contact, unless the conversation becomes a client relationship or longer retention is needed for a legal reason.

  • Client and financial records

    For the service relationship and generally up to six years afterward where needed for tax, accounting, contractual or legal-claims purposes.

  • Security and server logs

    Usually retained for a shorter operational period determined by the hosting and security configuration, unless needed to investigate an incident.

  • Analytics and advertising data

    According to configured retention settings, consent choices and the relevant provider’s policies. Aggregated reports may no longer identify an individual.

Information may be deleted earlier where it is no longer required, or retained longer when necessary to comply with law, resolve a dispute or protect legal rights.

07

How information is protected

Reasonable technical and organisational measures are used to protect personal information. These may include HTTPS encryption, access controls, account security, software maintenance, backups, spam and abuse protection, and limiting access to those who need the information.

No internet transmission or storage method can be guaranteed completely secure. If a personal-data breach creates a risk requiring notification, affected individuals and the relevant regulator will be informed as required by law.

08

International transfers

Some technology providers may process or make information accessible outside the United Kingdom. Where UK data-protection rules treat this as a restricted transfer, an appropriate transfer mechanism should be used, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another legally permitted safeguard.

Provider arrangements and processing locations may change. You may contact Dev By Ghani for further information about safeguards relevant to your personal information.

09

Your data-protection rights

Depending on the circumstances and lawful basis, you may have the right to:

Be informedRequest accessCorrect inaccurate dataRequest erasureRestrict processingObject to processingRequest portabilityWithdraw consent

You also have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects. Dev By Ghani does not currently use website enquiry information to make those decisions.

Rights are not absolute and exemptions may apply. To make a request, email admin@devbyghani.co.uk. Reasonable information may be requested to confirm identity. There is normally no fee, although the law permits one or allows refusal in limited circumstances.

10

Children and external websites

This website and its services are intended for business users and are not directed at children. Personal information should not knowingly be submitted by anyone under 13 without appropriate parental or guardian involvement.

The website links to external websites and services. Dev By Ghani does not control their content, security or privacy practices, so review their notices before providing information.

11

Changes to this policy

This notice may be updated when services, providers, legal requirements or data practices change. The latest version will appear on this page with a revised date. Material changes may also be highlighted elsewhere on the website where appropriate.

Privacy question or request?

Contact Dev By Ghani directly.

Email admin@devbyghani.co.uk. If you are dissatisfied with the response, you may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint/.

Chat on WhatsApp