PRIVACY POLICY
Transparent, uncompromising data protection. Details on how I collect, process, and safeguard your personal information, technical credentials, and project files.
THE SHORT VERSION
I respect your personal data and intellectual property completely. I only collect information required to scope, develop, and deploy your web engineering projects. I never sell your data, use third-party advertising tracking pixels, or retain staging server passwords after client handover.
Identity of the Data Controller
For the purposes of applicable data protection legislation (including the General Data Protection Regulation (GDPR) and UK GDPR), the data controller responsible for personal information collected on this website is:
Entity: Fajle Rabbi Choyon (Independent Senior Web Designer & Developer)
Physical Base: Sector 10, Uttara, Dhaka-1230, Bangladesh
Direct Inquiries: hire@choyon.dev
Official Portfolio: https://choyon.dev
Information You Provide Directly
Depending on how you interact with choyon.dev, the following categories of data are gathered:
- Contact Details: Full name, business email address, company name, phone number, and WhatsApp/Telegram handle submitted via contact or project scoping forms.
- Project Assets & Specifications: Figma designs, wireframes, functional requirement documents, brand style guides, content databases, and technical briefs.
- Deployment & Infrastructure Credentials: Staging FTP/SFTP, SSH keys, hosting panel accounts, domain registrar DNS access, or GitHub repository permissions necessary to build and deploy web applications.
- Public Diagnostic Inputs: URLs entered into the Website Speed & SEO Doctor or Stack Advisor tools, used solely to generate real-time performance telemetry.
How and Why Your Information Is Processed
In compliance with GDPR Article 6, your information is processed strictly under the following lawful grounds:
- Performance of a Contract: Processing is required to prepare project proposals, execute milestone deliverables, configure software environments, and perform website deployment.
- Legitimate Interests: Running security monitoring, diagnosing server build errors, and responding directly to business inquiries.
- Legal Compliance: Maintaining accounting, invoice records, and tax filings required by statutory regulations in Bangladesh.
Third-Party Systems & Data Transfers
To run a modern, secure engineering workflow, certain technical data may be processed through trusted third-party cloud infrastructure providers:
No Behavioral Ad Trackers
This website does not load behavioral advertising cookies, Facebook tracking pixels, or cross-site tracking scripts. Browser localStorage and session cookies are used exclusively for core technical functionality:
- Preserving selected inputs during multi-step tool sessions.
- Theme preferences and UI toggle states.
Handling Sensitive Technical Access
Hosting credentials, SSH keys, database dumps, and API secrets provided by clients are handled with rigorous security discipline:
- All credentials must be transferred through encrypted vaults (Bitwarden, 1Password, or encrypted environment files). Never share passwords via unencrypted chat channels.
- Staging access tokens and database migration backups are permanently purged within 14 calendar days following final client sign-off and production handover.
- Clients are advised to rotate all server, hosting, and API passwords immediately after project deployment.
Access, Correction & Erasure Rights
Regardless of your geographic location, you retain full rights regarding your personal information:
- Right of Access: Request a full copy of the personal contact data held about you.
- Right to Rectification: Request correction of inaccurate or incomplete contact records.
- Right to Erasure: Request the deletion of project notes, emails, and scoping submissions where statutory accounting rules permit.
Submit a Data Request
For questions regarding this policy or to request data erasure, reach out directly: