1. Who We Are

Controller: Web Design with Nikki Shaheed ("we,” “us,” or “our").

Website: https://webdesign.nikkishaheed.com

Contact: webdesign@nikkishaheed.com

2. Information We Collect

We collect information that you provide directly and information collected automatically when you use the Services.

2.1 Information You Provide

  • Contact & Inquiry Data: name, email address, phone number, company, project details, budget, and any other information you include when submitting a contact form, booking a discovery call, or requesting a quote.
  • Payment Data: billing name, address, and partial card details processed by a third-party payment processor. We do not store full card numbers on our servers.
  • Content You Provide: testimonials, portfolio permissions, or feedback.

2.2 Information Collected Automatically

  • Usage & Device Data: IP address, browser type/version, device identifiers, pages visited, time/date, referring/exit pages, and other diagnostic data.
  • Cookies & Similar Technologies: small files stored on your device that help operate the Site and analyze performance. See Section 6.

2.3 Information From Third Parties

  • Analytics Providers (e.g., Google Analytics): aggregated usage statistics.
  • Payment Processors: payment confirmations, fraud indicators.
  • Scheduling Tools: booking details and communications metadata.

3. How We Use Your Information

We use information for the following purposes:

  • To operate, maintain, and improve the Site and Services.
  • To respond to inquiries, provide quotes, proposals, and project updates.
  • To manage client accounts, contracts, invoices, and payments.
  • To personalize content, including portfolio examples and service suggestions.
  • To conduct analytics and measure the effectiveness of the Site.
  • To detect, prevent, and address technical issues, fraud, or abuse.
  • To send service-related communications and, with your consent where required, marketing communications you can opt out of at any time.

4. Legal Bases for Processing (EEA/UK users)

If you are in the EEA or UK, we process your personal data under the following legal bases:

  • Contractual necessity (Art. 6(1)(b) GDPR) to provide quotes, perform services, and manage projects.
  • Legitimate interests (Art. 6(1)(f)) such as improving the Site, preventing fraud, and marketing to existing clients.
  • Consent (Art. 6(1)(a)) for optional cookies/analytics and marketing communications.
  • Legal obligations (Art. 6(1)(c)) for tax, accounting, and compliance purposes.

5. Sharing of Information

We may share information with:

  • Service Providers/Processors: hosting providers, analytics platforms (e.g., Google Analytics), payment processors, email service providers, CRMs, and scheduling tools—only as necessary to perform services on our behalf.
  • Professional Advisors: accountants, auditors, legal counsel.
  • Business Transfers: in connection with a merger, acquisition, or asset sale (we will notify you of any material changes).
  • Legal Requirements: when required by law or to protect rights, property, and safety.

We do not sell personal information.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Keep the Site secure and functional (strictly necessary cookies).
  • Remember your preferences (functional cookies).
  • Measure performance and understand how the Site is used (analytics cookies).

Where required by law, we will request your consent before setting non-essential cookies. You can manage cookies in your browser settings and (if implemented) via our cookie banner.

Cookies We Typically Use

  • Session cookies for site functionality.
  • Analytics cookies (e.g., _ga, _gid) to analyze traffic and usage trends.

7. Analytics

We use Google Analytics to understand Site traffic and usage. Google may collect information such as your IP address and device identifiers. You can opt out by installing the Google Analytics opt-out browser add-on or adjusting cookie preferences.

8. Marketing Communications

With your consent where required, we may send newsletters, updates, or promotions. You can opt out via the unsubscribe link in emails or by contacting us.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, including to meet legal, accounting, or reporting requirements. Typical retention periods:

  • Inquiry & quote data: up to 24 months from last interaction.
  • Client/project records: up to 7 years after project completion (for tax/accounting).
  • Analytics data: per provider defaults or as configured.

10. Data Security

We implement administrative, technical, and physical safeguards proportionate to the sensitivity of the data, including HTTPS encryption, access controls, and regular updates. No method of transmission or storage is 100% secure.

11. International Data Transfers

Your information may be processed outside your country of residence, including in the United States. Where applicable, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

12. Your Rights

Depending on your location, you may have rights over your personal data, including:

  • Access, correction, deletion, and portability of your data.
  • Restriction or objection to certain processing.
  • Withdrawal of consent where processing is based on consent.

To exercise these rights, contact us using the details in Section 1. We may need to verify your identity.

12.1 EEA/UK Residents

You may lodge a complaint with your local data protection authority if you believe our processing violates applicable law.

12.2 California Residents (CCPA/CPRA)

We do not “sell” or “share” personal information as those terms are defined under California law. California residents may request to:

  • Know the categories and specific pieces of personal information collected.
  • Delete personal information (subject to exceptions).
  • Correct inaccurate information.
  • Limit the use of sensitive information (if collected).

Requests can be submitted via the contact details in Section 1. We will not discriminate against you for exercising your rights.

13. Children’s Privacy

The Services are not directed to children under 13. We do not knowingly collect personal information from children.

14. Third-Party Links

The Site may contain links to third-party websites or services not operated by us. We are not responsible for their content or privacy practices.

15. Changes to This Policy

We may update this Policy from time to time. The updated version will be indicated by an updated “Last updated” date at the top of this page. Material changes will be notified via the Site or by email where appropriate.

16. Contact Us

If you have questions about this Policy or our privacy practices, please contact us at:

Email: webdesign@nikkishaheed.com