Privacy Policy
Last updated: September 2026
This Privacy Policy explains how Thariq Hamad ("I", "me") collects, uses, and protects data when you visit thariqhamad.com (the "Site"). I am committed to transparency and to complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the Kingdom of Saudi Arabia Personal Data Protection Law (PDPL).
1. Data Controller
Thariq Hamad is the data controller for this Site.
Contact: thariqhamad6@gmail.com
2. What Data Is Collected
I do not collect personal data directly. However, this Site uses two third-party analytics services that may collect the following data automatically when you visit:
• Pages visited and navigation paths
• Time spent on pages
• Scroll depth and click interactions
• Approximate geographic location (country/city level)
• Device type, browser, and operating system
• Referring website or source
• Anonymous session recordings and heatmaps (Clarity only)
Blog posts and case studies also include a like/share feature. This stores only an anonymous, aggregate count of likes and shares per page (not linked to your identity) in a database. Whether you personally liked a page is remembered using your browser's local storage, not a cookie – see Section 5 for details.
3. Third-Party Services
Google Analytics 4 (Google LLC)
Purpose: Understand aggregate site traffic and visitor behaviour.
Data retained: 14 months (Google default).
Optout: https://tools.google.com/dlpage/gaoptout
Privacy policy: https://policies.google.com/privacy
Microsoft Clarity (Microsoft Corporation)
Purpose: Session recordings and heatmaps to improve site usability.
Data retained: 90 days (Clarity default).
Optout: https://clarity.microsoft.com/optout
Privacy policy: https://privacy.microsoft.com/privacystatement
Supabase (Supabase Inc.)
Purpose: Stores the anonymous, per-page like and share counters shown on blog posts and case studies. No personal or visitor-level data is collected – only an aggregate count per page.
Data retained: Indefinitely, as an aggregate page-level count not linked to any visitor.
Privacy policy: https://supabase.com/privacy
4. Legal Basis for Processing
Under GDPR (EU/EEA visitors): Processing is based on your freely given consent (Article 6(1)(a)). You may withdraw consent at any time by clicking "Decline" in the cookie banner or clearing your browser's local storage.
Under KSA PDPL (Saudi Arabia visitors): Processing is based on your consent provided via the cookie consent banner on this Site, in accordance with the Personal Data Protection Law issued by Royal Decree No. M/19.
5. Cookies
Both Google Analytics and Microsoft Clarity use cookies and similar tracking technologies to identify returning visitors and maintain session continuity. No cookies are set until you explicitly accept via the consent banner.
Separately, the like button on blog posts and case studies uses your browser's local storage – not a cookie – to remember only that you personally liked a given page, so the button doesn't reset on your next visit. This is strictly functional, contains no tracking or personal data, is never transmitted anywhere, and does not require consent via the banner above.
6. Data Sharing
I do not sell, rent, or trade your data. Analytics data is shared with Google and Microsoft solely as processors for the services described above. Both companies maintain their own compliance certifications under applicable privacy frameworks.
7. Your Rights
Depending on your jurisdiction, you may have the following rights:
• Right to access: Request a copy of data held about you.
• Right to erasure: Request deletion of your data.
• Right to object: Object to processing of your data.
• Right to withdraw consent: Opt out at any time.
• Right to lodge a complaint: Contact your local data protection authority (EU/EEA) or the Saudi Data & AI Authority (SDAIA) for KSA residents.
To exercise any right, contact: thariqhamad6@gmail.com
8. Data Transfers
Google and Microsoft may process data on servers outside your country of residence, including in the United States. Both maintain Standard Contractual Clauses (SCCs) and other safeguards required under GDPR and applicable laws.
9. Data Security
All data is processed by Google and Microsoft under their respective security standards. This Site is served over HTTPS to protect data in transit.
10. Changes to This Policy
This policy may be updated from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Site after changes constitutes acceptance of the updated policy.
11. Contact
For any privacy-related questions or requests:
Email: thariqhamad6@gmail.com
Website: https://thariqhamad.com