Privacy Policy

1. Introduction

This Privacy Policy explains how Yahia H. Ali ("I", "me", "my") collects, uses, and protects your personal information when you visit my personal website at www.yahiaali.com.

I am committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This website uses minimal technology and only collects personal data when you explicitly provide it through the contact form.

2. Information I Collect

2.1 Information You Provide

When you use the contact form on my website, I collect:

• Your name
• Your email address
• Your message content

2.2 Technical Information

As this website is hosted on GitHub Pages, I have limited access to visitor information. GitHub may collect basic technical data for service operation, but I do not receive detailed analytics or tracking information about individual visitors.

The only personal data I collect is what you explicitly provide through the contact form.

3. How I Use Your Information

I use the information you provide through the contact form to respond to your inquiries and messages.

4. Legal Basis for Processing

Under GDPR, I process your personal data based on:

• Consent: When you explicitly agree to the processing of your data
• Legitimate Interest: To respond to your inquiries and maintain professional relationships

5. Data Sharing and Third Parties

I do not sell, trade, or rent your personal information to third parties. However, your data may be processed by:

• Formspree: My contact form service provider
• GitHub Pages: My website hosting provider
• CDN Services: For website functionality (Tailwind CSS, Font Awesome)

These services have their own privacy policies and data processing agreements.

6. Data Retention

I retain your personal information for ongoing professional communication and networking. Contact form submissions are stored in my email inbox and Formspree account. You can request deletion or exercise other data rights by contacting me through the contact form.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

8. Cookies and Local Storage

My website uses minimal technology for essential functionality:

• Essential Cookies: Only those required for basic site functionality (if any are set by external CDN services)
• Local Storage: Your theme preference (dark/light mode) is stored locally in your browser
• No Tracking: I do not use analytics, advertising, or tracking cookies

The external services I use (Tailwind CSS, Font Awesome, Formspree) may set essential cookies for site functionality. These do not require consent under GDPR as they are necessary for the website to work properly.

You can control cookie settings through your browser preferences, though disabling essential cookies may affect site functionality.

9. Data Security

I implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

10. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). I ensure such transfers comply with GDPR requirements through appropriate safeguards.

11. Contact Information

For any questions about this Privacy Policy or to exercise your data protection rights, please contact me:

12. Changes to This Policy

I may update this Privacy Policy from time to time. I will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

13. Complaints

If you believe I have not addressed your concerns satisfactorily, you have the right to lodge a complaint with your local data protection authority.