Privacy

Who I am

This is the personal website of Mian Khubaib Jim. I am the controller of the personal data collected here. To reach me about your data, use any of the routes on the About page.

What I collect

• Newsletter: your email address, the date you subscribed and confirmed, and consent evidence (the sentence you agreed to, your browser and a one-way hash of your IP address, never the address itself).
• Speaking invitations: your name, email address, event, date and message.
• Whitmont Fellows interest: your name, email address, what you are building and where you are based.
• Server logs: the hosting provider keeps standard request logs for security and reliability.

• Analytics, only if you accept cookies: Microsoft Clarity records how the site is used (pages viewed, clicks, scrolling and anonymised recordings of visits, with anything typed into forms masked). Nothing is collected before you accept. See the Cookies page.

I do not use advertising tools.

Why, and on what basis

• The newsletter runs on your consent, which you can withdraw at any time with the unsubscribe link in every email.
• Speaking and Whitmont Fellows messages are handled on the basis of legitimate interest: replying to you and keeping a record of the conversation.
• Server logs are kept on the basis of legitimate interest in keeping the site secure.
• Analytics runs only on your consent, given in the cookie banner and withdrawn at any time through Cookie settings at the foot of every page.

Who processes it

• Railway: hosting, the database and file storage.
• Resend: sending confirmation and newsletter emails, once email sending is switched on.
• Microsoft (Clarity): analytics, only for visitors who accept cookies.
• Cloudflare (Turnstile): checks that the speaking invitation is sent by a person and not a bot. It sees your browser and IP address for that check only and sets no tracking cookies.

Nothing is sold or shared for marketing.

How long

• Newsletter details are kept until you unsubscribe.
• Messages are kept for as long as the conversation is useful, and no longer than two years.
• Server logs follow the hosting provider's short retention.
• Clarity keeps recordings for about 30 days and summary data for up to 13 months, under Microsoft's terms.

Your rights

Under UK data protection law you can ask for a copy of your data, ask for it to be corrected or deleted, object to how it is used, or withdraw consent. You can also complain to the Information Commissioner's Office at ico.org.uk.