Who's responsible
In short Me. Email me about anything on this page.
- Who
- Khaled Jamal (Khaled Mohammad Jalal Jamal), also known online as Dequavious
- Business
- HELM, a commercial establishment in the Commercial Register, Zahle, Lebanon, No. 4014899
- Registered office
- Baalbek, Al-Saadeh, Property No. 160, Lebanon
- [email protected]
This policy covers this site and my work with you. If your project runs on Helm, Helm's privacy policy also covers your dashboard.
What I collect and why
In short Only what you send me, what a payment needs, and basic records of visits.
Contact messages
Your name, email, reason for writing and message.
- Why
- To reply to you.
- Who sees it
- Me and Helm.
- How long
- Until they're no longer useful for following up.
Project briefs
Your name, email, company, project details, budget, timeline, design preferences, files you attach and how you heard about me.
- Why
- To quote for your project and, if it goes ahead, deliver it.
- Who sees it
- Me and Helm.
- How long
- Until no longer useful if there's no project. Up to 7 years after the last invoice if there is.
Deposit payments
Your email, the amount, the currency and a reference. Your card details go to Stripe, and I never see them.
- Why
- To take, record and refund payments.
- Who sees it
- Stripe, Helm and me.
- How long
- Up to 7 years, for tax and accounting.
Project conversations
Emails, messages and call notes while we work together.
- Why
- To deliver the project.
- Who sees it
- Me, Helm and the tools used on the project.
- How long
- During the project, and up to 7 years after the last invoice.
Visit records
The pages you see and what you do on them, explained in full in the next section.
- Why
- To see what people read and where the site can be better.
- Who sees it
- Me and Helm.
- How long
- Currently with no set end date.
Security data
Your IP address and browser in server logs. Your country, from your IP address, to show prices in your currency and block abuse.
- Why
- To keep the site working and safe.
- Who sees it
- Cloudflare and Helm.
- How long
- Server logs for up to 90 days.
The project wizard saves your draft in your own browser, so you don't lose it. Nothing reaches me until you press send.
How visits are counted
In short My own analytics, with no advertising, no cookies and no stored IP address. You can switch it off.
This site counts visits with Helm, my own platform, and not with Google Analytics or anything like it. For each page, it records:
- the page's address, where you came from and any campaign tags in the link;
- a rough location worked out from your IP address, your device and browser, your window size and how long the page took to load;
- the links and buttons you click, labelled by their text, and links you follow to other sites;
- how far you scroll and how long you spend on the page and on each part of it;
- that a form was sent, but never what you typed into it.
Your IP address isn't stored. A daily identifier made from your IP address and browser counts several pages as one visitor, using a random key that's destroyed at the end of the day. A separate random identifier stays in your browser tab, in session storage, to group one visit's pages together, and goes away when the tab closes.
If your browser sends Global Privacy Control, your visit isn't counted at all. You can also turn counting off yourself with the switch in the Cookie Policy.
My reasons for using your data
In short To do what you asked, to run the site properly, and to follow the law.
- Contract: to quote for a project, deliver it and take payment, because you asked me to.
- Legitimate interests: to reply to enquiries, keep the site secure and count visits so I can improve it. You can object at any time.
- Legal obligation: to keep tax and accounting records.
- Consent: if I ever need it for something else, I'll ask first, and you can withdraw it whenever you like.
I don't use your data for advertising, I don't sell it, and I don't make automated decisions about you that have legal or similar effects. Lebanese law, including Law No. 81/2018, applies to how I handle your data, and so do the rules of your own country where they apply to me.
Who else sees it
In short Only the services that make this work. Each one gets just what its job needs.
Helm
My own platform. It stores messages, briefs, files and visit records, and receives email on its own mail server.
Germany
- H
Hetzner
The servers Helm and this site run on.
Falkenstein, Germany
Cloudflare
Delivers the site, works out your country and checks forms with Turnstile.
Worldwide
Stripe
Takes deposit payments and holds your card details.
Worldwide, including the US and Ireland
Resend
Delivers the email I send you, so it sees your address and the message.
United States
- D
Development tools
Tools used to build your project, only once a project is underway.
Depends on the tool, often the US
I may also share data if the law requires it, or to protect my rights in a dispute. If my business is ever sold or transferred, your data would move with it, and I'd tell you first.
Where your data lives
In short Stored in Germany, managed from Lebanon, and some services work from other countries.
Your data is stored on servers in Falkenstein, Germany. I manage it from Lebanon, and some of the services above process parts of it in other countries, including the United States. Where the law asks for it, I rely on the providers' standard contractual clauses or similar safeguards. Other transfers happen because they're needed to answer you or to deliver what you asked for.
How long it's kept
In short As long as it's useful or legally required. Deleted data can stay in encrypted backups for up to 25 months.
The table above gives the time for each kind of data. Ask me to delete something and I'll do it within 10 days, unless the law makes me keep it, as with invoices. Encrypted backups rotate on a schedule, so deleted data can stay in one for up to 25 months before the last copy goes. Backups are only restored after a serious fault.
Your rights
In short See it, correct it, delete it or object. Email me, and I'll answer within 30 days.
Wherever you are, you can email [email protected] to ask what I hold about you, get it corrected or deleted, or object to how I use it. I'll answer within 30 days and it costs nothing. You may have more rights depending on where you live:
The law
Law No. 81/2018 on Electronic Transactions and Personal Data
You can find out what I hold about you, and have it corrected or removed.
If we can't solve it together, you can go to the competent Lebanese authorities or courts.
The law
UK GDPR and the Data Protection Act 2018, or the EU GDPR
You can access, correct, delete, restrict or move your data, object to how it's used, and withdraw consent.
You can complain to the UK's Information Commissioner's Office, or to the data protection authority in your EU country.
The law
UAE Federal Decree-Law No. 45 of 2021, Saudi Arabia's Personal Data Protection Law, and the laws of the other Gulf states
You can generally access, correct and delete your data, and object to or limit how it's used.
You can complain to your local regulator, such as the UAE Data Office or Saudi Arabia's SDAIA.
The law
PIPEDA, and provincial laws such as Quebec's Law 25
You can access and correct your data, ask how it's used, and withdraw consent.
You can complain to the Office of the Privacy Commissioner of Canada or your provincial commissioner.
How it's protected
In short Encrypted connections, restricted access and regular backups. No system is perfect, so I'd tell you about a breach.
Connections are encrypted, access is restricted, backups are encrypted and kept off-site, and forms are protected against automated abuse. No system is completely secure, so if a breach affects your data, I'll tell you as the law requires.
Children
In short This site is for businesses and adults.
This site isn't aimed at anyone under 18, and I don't knowingly collect their data. If you think a child has sent me something, email me and I'll delete it.
Changes to this policy
In short If it changes, the date at the top changes, and I'll email you if it affects a live project.
I'll post any change here with a new date. If a big change affects a project we're working on, I'll email you too.