Privacy Policy
Privacy Policy
Effective Date: 1ST May 2025
Our Commitment
Pakistan lacks a comprehensive data-protection act (the 2023 Bill is pending). Until enacted, we adopt GDPR-style transparency and PECA 2016 security duties.
Data Controller
- Zenith Irfan
- Lahore, Pakistan
- team@zenithirfan.com
Cookies & Tracking Technologies
- On first visit, a banner lets you Accept All, Reject Non-essential, or Customize.
- Essential: comment-form cookies, security tokens.
- Analytics: _ga (26 months retention).
- Advertising: Double-click cookie (_gads, 13 months) once AdSense is live. You may also adjust browser settings to block cookies.
Third-Party Services
- Hosting: Hostinger (servers may be located in Singapore, the EU, or the USA; data transfers are protected by Standard Contractual Clauses and equivalent safeguards)
- Analytics: Google Analytics 4 (IP anonymisation enabled).
- Email Marketing: Mailchimp (to be activated; EU–US safeguards via SCCs). We never sell your data. We share it only with these processors under contract.
Data Security
- SSL/TLS across the site
- Restricted admin access; 2-factor authentication enabled for editors
- Encrypted server backups
- Quarterly updates to plugins/themes and vulnerability scans
Your Rights
Email team@zenithirfan.com to:
- Request a copy of your personal data;
- Correct or delete it;
- Withdraw consent for marketing emails;
- Object to processing based on legitimate interest. We respond within 30 days.
Children’s Privacy
We do not knowingly collect data from children under 13. If you believe we have, contact us for deletion.
International Transfers
Data may be processed on servers located outside Pakistan. Where applicable we rely on EU Standard Contractual Clauses or equivalent safeguards.
Policy Updates
We will post any changes on this page with a new “Effective Date” and, for material changes, a banner notice.