Who is responsible
Khadaffi is the person responsible for deciding how personal information is used for this website and related client services. The service is based in the United Kingdom.
Questions or requests can be sent to hello@khadaffi.com.
Information received
Information you choose to provide
- Your name, email address, phone number and business details.
- Information about your project, current website, goals and requested service.
- Messages, files, feedback and access details shared during client work.
- Agreement, invoice and support records.
Payment information
Stripe handles card and bank payment details on its own systems. Khadaffi.com may receive a payment status, customer contact details and a Stripe reference. Full card details are not requested or stored by this website.
Basic technical information
When a page is requested, hosting and delivery providers process basic network information needed to serve it. This can include an IP address, browser details, requested page, date, time and error information.
How information is used
- To answer an enquiry and prepare a custom quote.
- To plan, build, test, deliver and support agreed work.
- To manage agreements, invoices, payments and service records.
- To operate the website, diagnose faults and prevent misuse.
- To meet legal, accounting and dispute handling duties.
Information is not sold. It is not used for automated decisions that have legal or similarly significant effects.
Lawful reasons for use
| Reason | When it applies |
|---|---|
| Steps before a contract | Answering your request and preparing a quote. |
| Contract | Delivering and supporting work you have agreed to buy. |
| Legitimate interests | Operating the service, keeping proportionate records, improving reliability and protecting systems. |
| Legal obligation | Keeping records or responding when the law requires it. |
| Consent | Where a specific optional use is clearly offered and you choose it. |
Service providers
Only providers needed for the relevant page or client service receive information. Current website providers include:
- Amazon Web Services for hosting and delivery through AWS Amplify.
- EmailJS for sending information submitted through the project enquiry form.
- Stripe for the existing-client payment page.
Information may also be shared with a professional adviser, court, regulator or public authority when reasonably necessary or legally required.
Processing outside the United Kingdom
Some providers operate internationally. Where information is processed outside the United Kingdom, the relevant provider is expected to use a lawful transfer method and appropriate safeguards under its terms.
Cookies and browser storage
The public marketing pages do not intentionally set advertising or tracking cookies at the date shown above. Basic browser storage may still be used by a service that is necessary for a feature you choose to open.
Stripe’s hosted checkout can use cookies or similar storage for checkout, fraud prevention and payment security. Stripe controls that processing under its own privacy information. It loads when you follow a payment link.
How long information is kept
Information is kept only while it is reasonably needed for the purpose described in this policy. The period depends on whether an enquiry becomes client work, the support that was agreed, any dispute and legal record keeping duties.
- Unsuccessful enquiry information is reviewed and removed when it is no longer useful for responding to that enquiry.
- Client, agreement, invoice and payment records can be kept for the period required for tax, accounting and legal purposes.
- Project files and support messages are kept while needed to deliver the work, provide agreed support or protect legitimate legal interests.
Your data rights
Depending on the circumstances, United Kingdom data protection law can give you rights to:
- Ask for access to your personal information.
- Ask for inaccurate information to be corrected.
- Ask for information to be erased or its use restricted.
- Object to a use based on legitimate interests.
- Receive eligible information in a portable format.
- Withdraw consent where consent is the reason for use.
These rights can have legal limits. To make a request, email hello@khadaffi.com. Identity may need to be confirmed before information is released. You can also raise a concern with the United Kingdom data protection regulator.
Security
Reasonable technical and organisational steps are used to protect information, including encrypted web connections, controlled access and limiting collection to what is needed. No website or transmission method can promise absolute security.
If you believe information connected with this service has been exposed, contact security@khadaffi.com.
Children
The services are intended for businesses and adults arranging professional work. Personal information from a child is not knowingly requested. A parent or guardian who believes a child has supplied information can ask for it to be reviewed and removed.
Changes and contact
This policy can change when the website, providers or working practices change. The updated date at the top records the current version.
Questions about this policy or the use of your information can be sent to hello@khadaffi.com.