Privacy Policy
Plain language. No legal obfuscation. Exactly what we collect, why, and what you can do about it.
Overview
AdnanBuilds (adnanbuilds.online) is a full-stack digital studio operated by Adnan, based in India. This Privacy Policy explains what information we collect, why we collect it, how we use it, and what rights you have over it.
We collect only what we need to deliver your project and run this business. We don't sell your data. We don't run ads. We don't share your information with third parties except where operationally necessary and explicitly listed below. This document tells you exactly what 'necessary' means.
This policy applies to all visitors, clients, newsletter subscribers, and anyone who interacts with AdnanBuilds across adnanbuilds.online, our social channels, or via direct communication (email, DMs, calls). By using our services or engaging with our content, you agree to the terms described here.
Effective Date
This policy is effective from January 1, 2026 and was last reviewed in April 2026. We will update this document when our practices change and notify active clients and newsletter subscribers of material changes.
What Data We Collect
We collect data across three contexts: when you use the website, when you engage our services as a client, and when you subscribe to our newsletter or community content. Here is a precise breakdown of each:
Website Visitors
We use Vercel Analytics and Plausible (privacy-first, cookieless analytics) to understand page performance and traffic sources. This includes: page views, referrer URLs, country-level location (not precise geolocation), device type (mobile/desktop), and browser type. No personally identifiable information is captured at this layer. No cookies are placed for analytics purposes.
Clients & Project Enquiries
When you book a discovery call or commission a project, we collect: your name, email address, business name, project brief and requirements, communication history (email threads, call notes), payment details (processed via Razorpay or Stripe — we never store card numbers), and any assets you provide (logos, copy, credentials) required to deliver your project.
Newsletter Subscribers
When you subscribe to The Builder's Brief, we collect: your name (optional) and email address. We track open rates and click rates within emails to understand what content is valuable — this is standard email marketing practice. You can unsubscribe at any time via the link in every email.
Social Media Interactions
If you DM us, reply to our posts, or interact on X, Instagram, Threads, Reddit, LinkedIn, GitHub, or YouTube, the platform's own privacy policy governs that data. We may keep a record of direct messages relevant to business enquiries or collaboration requests.
We do not collect precise geolocation. We do not place tracking cookies. We do not build advertising profiles. We do not use session recording tools (Hotjar, FullStory etc.) on adnanbuilds.online. We do not purchase or source data from third-party data brokers.
How We Use Your Data
Every piece of data we collect has a specific, documented reason. We do not collect first and decide later.
| Name & email (client) | Communicate about your project scope, deliverables, and timeline |
| Project brief & assets | Deliver the contracted service accurately and completely |
| Payment details | Process your payment via Razorpay / Stripe (we never store card data) |
| Communication history | Maintain an accurate record of agreed scope and decisions |
| Email (newsletter) | Send The Builder's Brief weekly and relevant product launch alerts |
| Analytics (aggregated) | Improve site performance and understand which content is useful |
| Social DMs | Respond to enquiries and collaboration requests |
We will never use your data for a purpose you did not consent to. If we want to use a client project as a public case study, we will ask you explicitly in writing first. 'No' is always a complete answer.
Data Storage & Security
We take security seriously — not because compliance requires it, but because our clients trust us with their business assets. Here is how data is stored and protected:
Where Data Lives
Client communication is stored in encrypted email (Google Workspace). Project assets are stored in password-protected cloud storage (Google Drive with restricted access). Payment records are managed by Razorpay and Stripe — both are PCI-DSS compliant. Newsletter subscriber data is stored by our email service provider (Resend / ConvertKit) with encryption at rest. Analytics data is processed by Vercel Analytics and Plausible — both GDPR-compliant and cookieless.
Access Control
Only Adnan has access to client data. If a contracted collaborator requires access to specific project assets (e.g. a designer on an approved engagement), they are granted scoped, time-limited access only to what is necessary for that task — nothing more.
Retention
Client project data is retained for 2 years after project completion (for support and reference purposes) and then securely deleted unless you request earlier deletion. Newsletter subscriber data is retained for as long as you remain subscribed, plus 30 days after unsubscribe to process the removal fully. Analytics data is aggregated and anonymised — no identifiable records are kept.
All credentials shared for project delivery are stored in a password manager with AES-256 encryption, never in plain text. We recommend clients revoke or rotate any credentials shared with us immediately after project delivery. HTTPS is enforced on all AdnanBuilds web properties. We do not transmit sensitive data over unencrypted channels.
Third-Party Services
We use a small, carefully selected set of third-party services to operate AdnanBuilds. Each one is listed here with the specific data they handle and a link to their own privacy policy:
| Vercel | Hosting & analytics — aggregated, cookieless. vercel.com/legal/privacy-policy |
| Plausible Analytics | Privacy-first web analytics — no cookies, no PII. plausible.io/privacy |
| Razorpay | Payment processing for Indian market clients. razorpay.com/privacy |
| Stripe | Payment processing for international clients. stripe.com/privacy |
| Google Workspace | Email communication and file storage. workspace.google.com/terms/privacy |
| Resend / ConvertKit | Newsletter delivery and subscriber management |
| Cal.com | Discovery call booking — name and email only. cal.com/privacy |
We do not use Google Ads, Meta Pixel, TikTok Pixel, or any advertising network tracking on adnanbuilds.online. AdnanBuilds products are ad-free. We are not paid to promote third-party products in our content. Any tool or resource we recommend is based on genuine use and belief in its quality.
When you interact with our social channels (X, Instagram, Threads, Reddit, LinkedIn, GitHub, YouTube), you are subject to those platforms' own privacy policies. We encourage you to review them independently.
Your Rights
You have clear, enforceable rights over your personal data. We respect them — not as a compliance checkbox, but because it's the right way to operate. Here is what you can ask for and how:
- →Access — Request a copy of all personal data we hold about you. We'll respond within 7 business days.
- →Correction — Ask us to correct any inaccurate information. We'll update it and confirm.
- →Deletion — Request that we delete your data. We'll comply within 14 days except where we're legally required to retain records (e.g. payment records for tax compliance).
- →Portability — Request your data in a portable format (CSV or JSON). We'll provide it within 7 business days.
- →Objection — Object to our processing of your data for specific purposes (e.g. marketing). We'll immediately honour this.
- →Unsubscribe — Every newsletter contains a one-click unsubscribe link. You'll be removed from all marketing communication within 24 hours.
- →Withdraw consent — For any processing based on consent, you can withdraw it at any time by emailing adnan@adnanbuilds.online.
Email adnan@adnanbuilds.online with the subject line 'Privacy Request — [what you need]'. Be specific about what data and what action. We will acknowledge within 24 hours and complete the request within the timelines above.
If you are in the European Economic Area (EEA) or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority. In India, the Digital Personal Data Protection Act (DPDPA) 2023 governs your rights as a data principal — we comply with these requirements.
Children's Privacy
AdnanBuilds services are intended for businesses and individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, email adnan@adnanbuilds.online immediately and we will delete it within 48 hours.
Build-in-Public & Case Studies
AdnanBuilds documents the build process publicly as a core part of the brand. This includes threads on X, Reels on Instagram, Reddit posts, and newsletter content showing real projects, real decisions, and real results.
We will never publish, discuss, or reference a client project publicly without explicit written consent. This consent is either: (a) part of the project scope document you sign at the start, or (b) a separate written request we make after delivery. You can say no at any time, including after giving initial consent, and we will remove any existing references within 72 hours.
What We Anonymise by Default
Even when a client has consented, we do not publish: revenue figures without explicit approval, internal business logic or trade secrets discussed during the project, credentials or access information of any kind, or any information you have flagged as confidential in your brief.
Testimonials
If you provide a testimonial (written or video), we will use it on adnanbuilds.online and social channels as agreed. You can request its removal at any time by emailing adnan@adnanbuilds.online — we'll take it down within 48 hours.
Policy Changes
This Privacy Policy will be updated when our data practices change — new tools, new services, or new legal requirements. We will not reduce your rights without explicit notice.
- →Material changes (e.g. adding a new third-party service that handles personal data) will be communicated to active clients and newsletter subscribers via email at least 7 days before taking effect.
- →Minor changes (e.g. correcting a typo, clarifying existing language) will be updated on this page without separate notification.
- →The effective date at the top of this document will always reflect when the current version was last reviewed.
- →The previous version of the policy is available on request by emailing adnan@adnanbuilds.online.
Privacy decisions are made in your interest, not ours. If we ever can't explain clearly why we collect something, we don't collect it.
Contact
For any privacy-related questions, requests, or concerns, contact us directly. We read and respond to every message personally.
Primary Contact
Email: adnan@adnanbuilds.online — Subject line: 'Privacy Request — [your specific need]'. We acknowledge within 24 hours and resolve within the timelines specified in Section 07.
Business Address
AdnanBuilds · India · adnanbuilds.online. For formal legal correspondence, please email first to receive the registered correspondence address.
We read every email personally.
If anything in this document is unclear, incomplete, or you want to exercise any of your data rights — email us directly. No support tickets. No bots. A real response within 24 hours.