Data Protection Notice

1. Data Controller

The data controller responsible for your personal data is:

Muhammad Mubashir Ali
Trading as: MubashirNomad
Website: https://mubashirnomad.com
Email: [email protected]

As the data controller, I determine the purposes and means by which your personal data is processed.

2. What Personal Data Is Collected

When you use the contact form on this website, the following personal data is collected:

• Full Name
• Email Address
• Mobile Number
• Message content (optional)
• Portal

Additionally, certain technical data may be automatically collected when you visit the website, including IP address, browser type, and usage statistics (via analytics tools).

3. Lawful Basis for Processing

Your personal data is processed on the following lawful bases under Article 6 of the UK GDPR:

• Consent (Art. 6(1)(a)): When you submit the contact form, you provide consent for your data to be used to respond to your enquiry
• Legitimate Interests (Art. 6(1)(f)): For website analytics and improvement, where such interests are not overridden by your rights and freedoms
• Legal Obligation (Art. 6(1)(c)): Where processing is required by applicable law
• Portal

4. How Your Data Is Stored

Your personal data is stored securely using the following measures:

• Contact form submissions are transmitted securely via HTTPS (TLS encryption)
• Data is received and stored in secure, password-protected email accounts or CRM systems
• Access to personal data is restricted to Muhammad Mubashir Ali only
• Data is not stored in publicly accessible databases or shared with unauthorised third parties
• Regular security reviews are conducted to ensure data remains protected
• Portal

Data may be held in cloud-based services (including email providers) that operate under appropriate data processing agreements.

5. How Your Data Is Protected

The following technical and organisational security measures are in place to protect your data:

• Encryption in transit: All data transmitted between your browser and this website is encrypted using HTTPS/TLS
• Access controls: Personal data is accessible only to authorised individuals
• Minimal data collection: Only data necessary for the stated purpose is collected
• Secure service providers: Third-party tools used comply with their own security standards and data protection frameworks
• Regular reviews: Data handling practices are reviewed periodically to ensure continued compliance
• Portal

While every effort is made to protect your data, no online transmission or storage system is completely infallible. In the event of a data breach affecting your rights and freedoms, I will notify you and the relevant supervisory authority as required by law.

6. Data Retention

Personal data is retained only for as long as necessary:

• Contact form data: Retained for up to 24 months from the date of submission, or until the enquiry has been resolved and there is no further legitimate reason to retain it
• Analytics data: Retained in accordance with the third-party provider's retention policy (typically up to 26 months)
• Legal records: Where legally required, data may be retained for up to 6 years in accordance with UK statutory requirements
• Portal

Upon expiry of the retention period, data will be securely deleted or irreversibly anonymised.

7. Your Data Protection Rights

Under UK GDPR, you have the following rights in relation to your personal data:

8. How to Request Data Deletion

To request deletion of your personal data, please send a written request to:

Email: [email protected]
Subject line: Data Deletion Request

Please include:

• Your full name
• The email address used when contacting the website
• A brief description of the data you wish to have deleted
• Portal

I will respond to your request within 30 days of receipt. In some cases (e.g., complex requests), this may be extended by a further 60 days, in which case you will be informed.

Please note that some data may need to be retained where required by law or for the establishment, exercise, or defence of legal claims.

9. International Data Transfers

Some third-party services used on this website may process your data in countries outside the United Kingdom. Where this occurs, appropriate safeguards are applied, including Standard Contractual Clauses (SCCs) or adequacy decisions recognised by UK authorities.

10. Complaints

If you are unhappy with how your personal data has been handled, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Helpline: 0303 123 1113

I would, however, encourage you to contact me directly in the first instance so that I can address your concern promptly.

11. Updates to This Notice

This Data Protection Notice may be updated periodically to reflect changes in law or data handling practices. The current version will always be published on this page with the "Last updated" date shown above.

12. Contact

For any data protection queries or to exercise your rights, please contact:

Muhammad Mubashir Ali
MubashirNomad
Email: [email protected]
Website: https://mubashirnomad.com