This policy explains how this website handles your information.
It covers mhamzarashid.com only. It does not cover magnirise.com, the MagniRise agency, or any client engagement. When you apply for the Identity Audit, the engagement itself is governed by MagniRise's own terms and privacy policy.
This policy is written in plain language. If anything is unclear, email me.
Who is responsible for your data.
This website is operated by Hamza Rashid, an individual.
| Data controller | Hamza Rashid |
| Contact | research@mhamzarashid.com |
| Location | [To be confirmed] |
I am the person responsible for the information this site collects.
What information is collected.
This site collects very little. Here is exactly what.
| Where | What Is Collected | Required? |
|---|---|---|
| The Dispatch newsletter | Your email address | Required |
| Intermediaries contact | Name, email, organisation, who you represent, message | Required |
| Research inquiries | Name, email, project details, message | Required |
| Apply for the Identity Audit | Name, email, role, what prompted the inquiry, how you heard about me | Required |
| Site analytics | Pages visited, time on page, general location, device type | Not identifying |
What is not collected
- Payment information — no payments are taken on this site
- Passwords — there are no accounts on this site
- Sensitive personal data
- Data about children
Why this information is collected.
Each piece of information has one purpose.
| Information | Purpose |
|---|---|
| Email address | To send The Dispatch newsletter |
| Intermediary inquiries | To respond and, if relevant, coordinate on behalf of a principal |
| Research inquiries | To respond and, if relevant, share research sources |
| Application details | To assess whether the Identity Audit is the right next step |
| Analytics | To understand which pages are read and how people find the site |
Your information is never used for anything else.
The legal basis for collecting it.
Where data protection law applies — including the EU and UK — there must be a legal basis for collecting information.
| Activity | Legal Basis |
|---|---|
| Sending the newsletter | Your consent (you opted in) |
| Replying to intermediary inquiries | Legitimate interest (you contacted me) |
| Replying to research inquiries | Legitimate interest (you contacted me) |
| Assessing applications | Legitimate interest (you applied) |
| Analytics | Legitimate interest (understanding site use) |
You can withdraw consent at any time. See Your Rights below.
How long information is kept.
| Information | How Long It Is Kept |
|---|---|
| Newsletter subscription | Until you unsubscribe, plus 30 days |
| Intermediary inquiries | 24 months, then deleted |
| Research inquiries | 24 months, then deleted |
| Application submissions | 24 months, then deleted. If an engagement begins, longer retention applies under MagniRise's terms. |
| Analytics data | 14 months, then deleted |
| Server logs | 90 days, then deleted |
You can request earlier deletion at any time.
International transfers.
Some service providers may store data outside your country. Where this happens, appropriate safeguards are used, including standard contractual clauses where required.
The current list of providers and their locations is available on request.
Your rights.
Depending on where you live, you have rights over your information.
| Right | What It Means |
|---|---|
| Access | You can ask what information is held about you |
| Correction | You can ask for inaccurate information to be corrected |
| Deletion | You can ask for your information to be deleted |
| Restriction | You can ask for processing to be limited |
| Portability | You can ask for your information in a transferable format |
| Objection | You can object to processing based on legitimate interest |
| Withdraw consent | You can unsubscribe from the newsletter at any time |
To exercise any right: email research@mhamzarashid.com. I respond within 30 days.
If you are in the EU or UK, you also have the right to complain to your local data protection authority.
If you are in California, you have additional rights under the CCPA and CPRA, including the right to know, delete, correct, and opt out of sale or sharing. Your information is never sold or shared.
How information is protected.
| Measure | Detail |
|---|---|
| Encryption in transit | All form submissions and emails are encrypted |
| Encryption at rest | Stored information is encrypted |
| Access limitation | Only I have access to your information |
| No third-party marketing access | No provider receives your data for their own use |
No system is perfectly secure. If a breach occurs that affects you, you will be notified as required by law.
Children.
This site is not intended for anyone under 16. Information is not knowingly collected from children. If you believe a child has submitted information, contact me and it will be deleted.
Do Not Track.
Some browsers send a "Do Not Track" signal. Where received, analytics cookies are not set.
Changes to this policy.
This policy may be updated. The "Last updated" date at the top reflects the current version.
Where material changes are made, they will be announced on the site.
How to reach me.
For any question about this policy or your information:
I read every message myself and respond within 30 days on any privacy matter.