Privacy Policy

1. Scope and Introduction

This Privacy Policy applies to the personal data and technical information processed through the website located at https://syedraiyan.uk/, operated by Syed Raiyan, an independent email infrastructure, marketing automation, and deliverability consultant.

I treat privacy with the same rigor that I apply to email infrastructure: transparent data flows, minimal collection, strict purpose limitation, and zero hidden telemetry. Browsing this website does not require creating an account or accepting invasive tracking profiles.

2. Information Collected

Depending on how you interact with the site, information falls into three distinct categories:

• Information you provide directly: When you submit a business inquiry through the contact form or send an email, you provide your name, email address, message details, and any technical domain or deliverability context you choose to share.
• Technical diagnostic inputs: When you use free client-side diagnostic tools (such as the SPF, DKIM, and DMARC analyzer or RFC 9989 DMARC generator), you submit a domain name or DNS record string for immediate syntax validation or lookup.
• Automated server & security logs: When your browser connects to syedraiyan.uk, the hosting and edge security network (Cloudflare) records standard operational HTTP metadata, including your IP address, browser user-agent, operating system, requested page URL, referring URL, and connection timestamps.

3. Contact Forms & Business Inquiries

The contact form on syedraiyan.uk is provided exclusively for prospective clients, consulting inquiries, and professional communication.

Inquiry data is processed using Brevo (formerly Sendinblue) as the contact intake platform. When you submit the form, your submitted name, email address, and message text are securely transferred to Brevo's infrastructure to generate an internal notification and enable direct correspondence. Brevo acts as a data processor under contract. You can review Brevo's Privacy Policy.

To prevent automated abuse, spam submissions, and distributed denial-of-service attempts against the contact endpoint, the form integrates Google reCAPTCHA v3.

4. Diagnostic Tools & DNS Lookups

The website offers browser-based email authentication and diagnostic tools, including:

• Email Authentication Checker (SPF, DKIM, DMARC): Resolves published DNS records in real time using Cloudflare 1.1.1.1 DNS over HTTPS (DoH).
• RFC 9989 DMARC Generator & Analyzer: Parses and evaluates DMARC record syntax against published Internet Standards.

Public DNS Records vs. Personal Information

Domain names, IP addresses published in SPF mechanisms, DKIM selectors, and DMARC policies are publicly published Internet routing and security records. They are designed by Internet standard RFCs to be queried openly by receiving mail transfer agents worldwide.

While domain names themselves are public technical infrastructure, a domain name registered to an individual or sole trader may constitute personal data under certain regulatory definitions. For clarity:

• Diagnostic lookups are executed in real time to return the immediate diagnostic result requested by the user.
• Syed Raiyan does not maintain a persistent commercial registry, sales database, or behavioral index of domain names scanned using the public web tools.
• Tool queries do not require user authentication, passwords, or personal account creation.

5. Purposes and Legal Bases for Processing

Where European Union or United Kingdom data protection laws apply (such as the UK General Data Protection Regulation and the Data Protection Act 2018), processing is conducted only under lawful, specific legal bases:

6. Third-Party Service Providers

Personal data is never sold, rented, leased, or traded to third-party data brokers or marketing lists. Select third-party infrastructure providers support website functionality under strict operational purposes:

• Cloudflare, Inc.: Provides Content Delivery Network (CDN), DDoS mitigation, SSL/TLS encryption, edge routing (Cloudflare Workers), and DNS over HTTPS resolution. Cloudflare processes incoming IP addresses and request headers for security filtering and network performance. For details, review Cloudflare's Privacy Policy.
• Brevo (Sendinblue SAS): Powers inquiry form transmission and email communication management. Information entered in the contact form is routed through Brevo's secure API. For details, review Brevo's Privacy Policy.
• Google LLC (Google reCAPTCHA v3 & Google Analytics): Google reCAPTCHA v3 operates on form pages to analyze hardware and interaction data to prevent automated bot abuse. Google Analytics (GA4) provides aggregated audience statistics. Both are subject to Google's Privacy Policy and Google's Terms of Service.

7. Cookies & Tracking Technologies

Cookies are small text files placed on your device by websites you visit. This website uses a minimal set of cookies:

• Strictly Necessary / Security Cookies: Cloudflare edge security cookies (such as security tokens) may be set to differentiate legitimate visitors from malicious automated botnets and maintain HTTPS connection state.
• Anti-Spam Tokens: Google reCAPTCHA v3 sets technical tokens necessary to perform automated bot assessment upon interaction with inquiry forms.
• Performance & Analytics Cookies: Google Analytics sets first-party cookies (prefixed _ga) to measure pseudonymous, aggregated website traffic (such as which technical articles are visited most frequently). Analytics script loading is deferred until after initial page rendering (via requestIdleCallback or post-load timeout) to preserve visitor page-load performance.

Consent Notice: This website does not currently deploy an interactive consent banner modal; Google Analytics scripts initialize upon browser idle. If you prefer not to participate in analytics measurement, you can block or clear cookies via your browser settings, enable "Do Not Track" / Global Privacy Control signals, or install the official Google Analytics Opt-Out Browser Add-on. Disabling cookies will not prevent you from browsing technical articles, guides, or case studies on syedraiyan.uk.

8. International Data Transfers

Because syedraiyan.uk serves clients internationally (including across the United Kingdom, United States, Canada, Europe, and Australia) and relies on globally distributed cloud infrastructure providers (Cloudflare, Google, Brevo), data processed through the site may transit or be stored on servers located outside your country of residence, including within the United States and the European Economic Area.

These commercial service providers publish commitments to standard data protection contractual clauses, processor agreements, and relevant international data transfer frameworks where applicable under UK and EU data protection regulations. Users should review each provider's published legal documentation for their specific cross-border transfer mechanisms.

9. Data Retention & Deletion

Personal data is retained only for as long as reasonably necessary to fulfill the specific communication, operational, or consulting purposes for which it was collected, or to satisfy applicable legal, accounting, tax, and dispute-resolution requirements:

• Contact & Business Inquiries: Inquiries submitted through the contact form remain stored within Brevo and direct email correspondence for the duration of communication, scoping, or ongoing client engagement. Because a fixed, automated purge schedule is not currently hardcoded in website software, records are retained based on ongoing business relevance and manual periodic reviews.
• Consulting Engagements: Where an inquiry leads to a formal deliverability audit, infrastructure project, or consulting agreement, project documentation, invoices, and communication records are retained as necessary for business continuity, tax compliance, and legal limitation periods.
• Diagnostic Tool Lookups: Domain names, selectors, and DNS strings submitted through the free online diagnostic tools are processed ephemerally in memory to generate immediate reports and are not stored in a persistent customer database.
• Edge Logs: Cloudflare edge security and diagnostic request metadata are retained in accordance with Cloudflare's standard platform retention policies.

Owner Policy Notice: Precise automated retention intervals and scheduled purging routines across external platform accounts remain subject to operational determination and confirmation by the website owner.

10. Your Privacy Rights (GDPR / UK GDPR)

If you are located in the United Kingdom or European Economic Area, you hold statutory rights regarding your personal data under the UK GDPR, Data Protection Act 2018, and EU GDPR:

• Right of Access: You have the right to request a copy of the personal data held about you.
• Right to Rectification: You may request the correction of inaccurate or incomplete personal details.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where there is no overriding legal or contractual requirement to maintain it.
• Right to Restriction: You may request that processing of your personal data be temporarily suspended under specific statutory conditions.
• Right to Object: You have the right to object to processing based on legitimate interests.
• Right to Data Portability: You may request that personal data provided directly be transmitted to you or another controller in a structured, commonly used machine-readable format.
• Right to Withdraw Consent: Where processing relies on consent, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, email contacts@syedraiyan.uk. Requests will be acknowledged and addressed within statutory timelines (typically one month).

You also have the right to lodge a complaint with a data protection supervisory authority. In the UK, the relevant authority is the Information Commissioner's Office (ICO) (ico.org.uk).

11. Security Measures & Limitations

As an email infrastructure specialist, I apply technical safeguards to protect information against unauthorized access, loss, alteration, or disclosure:

• Mandatory HTTPS encryption across all web traffic with modern TLS protocols and HTTP Strict Transport Security (HSTS).
• Cloudflare edge security shielding origin infrastructure against DDoS, brute-force attempts, and unauthorized packet inspection.
• Two-factor authentication (2FA) enforced on all administrative systems, domain registries, and cloud infrastructure dashboards.
• Principle of least privilege applied to API credentials, DNS records, and email account integrations.

Security Notice: While industry-standard measures are maintained, no method of transmission over the Internet or electronic storage is completely infallible. If you believe your communication with syedraiyan.uk has been compromised, notify me immediately at contacts@syedraiyan.uk.

12. Children's Privacy

The services and diagnostic tools on syedraiyan.uk are intended strictly for commercial, technical, and business use by professionals. I do not knowingly collect, process, or solicit personal data from children under the age of 16. If you believe that a minor has submitted personal information through the contact form, contact me to request immediate removal.

13. External Links

This website includes links to external third-party platforms, such as Fiverr, LinkedIn, X (Twitter), Mailchimp Expert Directory, Calendly, and WhatsApp, as well as authoritative RFC specifications published by the IETF.

Clicking an external link directs you to a third-party platform governed by its own independent privacy practices, terms of service, and tracking technologies. Syed Raiyan does not operate or control third-party websites and assumes no responsibility for their content or privacy compliance.

14. Policy Updates & Contact Information

This Privacy Policy may be updated periodically to reflect changes in site functionality, diagnostic tool enhancements, or evolving regulatory guidance. When modifications occur, the "Last Updated" date at the top and bottom of this document will be revised accordingly.