Legal

Privacy Policy

Last updated: 10 January 2026

This policy explains what personal data I collect through this website, how I use it, and the rights you have over it. Short, because the site is simple. If something isn't mentioned here, I don't do it.

Who's in charge of your data

I'm Umar Salim, trading as Salim Consulting Ltd (UK company number 13999873, registered at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ). For any data question, email hello@salim.consulting.

What I collect

The only way this site collects data from you is the contact form. When you submit it, I receive:

  • Your name and email address
  • The project type you selected
  • Your budget band, if you chose to share one
  • Whatever you wrote in the message field
  • The IP address and user agent your browser sends with the request, which arrive alongside the submission as standard web traffic

The site sets no tracking or analytics cookies, and runs no analytics, tracking pixels, or advertising scripts. hCaptcha (see below) may set a short-lived functional cookie while verifying you're human.

How I use it

I read what you wrote, decide whether I can help, and reply. I may keep your email thread to preserve context for future conversations with you. I don't add you to any marketing list, and I don't send you anything you didn't ask for.

Lawful basis

My lawful basis for processing what you submit is Article 6(1)(b) of the UK GDPR: taking steps at your request before entering into a contract. Where a message turns out not to be about potential work, I rely on Article 6(1)(f), legitimate interest in running my business and responding to people who get in touch.

Third parties involved

Four third-party services are involved in making this site work:

  1. Cloudflare hosts the site and serves it through their CDN. When your browser loads the site, Cloudflare receives your IP address, the URL you requested, and standard browser request headers, as part of serving the response. Their privacy policy is at cloudflare.com/privacypolicy.
  2. Web3Forms processes your form submission and delivers it to my inbox. They temporarily hold the submission on their servers. Their privacy policy is at web3forms.com/privacy.
  3. hCaptcha, from Intuition Machines, Inc., protects the contact form from automated submissions. When you load the contact form, your browser connects to hCaptcha's servers, which receive your IP address and standard browser headers and run behavioural checks to decide whether you're human. Their privacy policy is at hcaptcha.com/privacy.
  4. Google Fonts serves the typefaces used on the site. When your browser loads the site, Google receives your IP address in the course of serving those fonts. Their privacy policy is at policies.google.com/privacy.

I don't share your data with anyone else.

International transfers

Cloudflare, Web3Forms, hCaptcha, and Google Fonts are US-headquartered and may process data outside the UK as part of serving the site or handling your submission. Transfers rely on the UK's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, as offered by each provider, which the ICO recognises as a valid safeguard.

How long I keep it

Form submissions that reach my inbox are kept for as long as the correspondence is useful, typically up to two years, then deleted. Web3Forms' retention follows their own policy.

Your rights under UK GDPR

You have the right to:

  • Ask what data I hold about you
  • Request a copy of it
  • Ask me to correct or delete it
  • Object to how I use it
  • Complain to the UK's Information Commissioner's Office at ico.org.uk if you're unhappy with how I've handled your data

To exercise any of these, email hello@salim.consulting. I'll respond within 30 days.

Changes to this policy

If I change anything material, I'll update the "last updated" date above.