Privacy Policy

This site (ataullis.com) is run by Ataullah Ghazi, trading as At. Ghazi, an individual web designer based in Indonesia (“I”, “me”, “my”). This policy explains what personal data I collect, why, and the rights you have under Indonesia's Personal Data Protection Law (UU No. 27 of 2022, “UU PDP”). For this data, I am the data controller (Pengendali Data Pribadi). Questions? Email hello@ataullis.com.

What I collect

I only collect what you choose to send me through the site:

• Your name
• Your email address
• Your phone / WhatsApp number (only if you give it)
• Your city or location (only if you give it)
• Your business name and type
• Your current website or Instagram, if you share it
• Anything you write in the message or notes fields

That's it. There is no account or login, and I do not use analytics or tracking cookies on this site.

Why I collect it (lawful basis)

I use your details to reply to your message, give you a quote or a free consultation, and to provide the service if you decide to hire me. The lawful basis is your consent (given when you submit a form) and, once we agree to work together, the performance of our agreement.

Who handles your data

When you submit a form, your details are delivered by email through Resend (an email delivery provider) and land in my Outlook inbox. These providers process the data on my behalf under their own security and privacy terms, and may store it on servers outside Indonesia. I do not sell your data or share it with anyone else.

How long I keep it

I keep inquiries only as long as needed to respond to you. If we work together, I keep your details for the duration of the project plus a reasonable period for my records. You can ask me to delete your data at any time.

Your rights

Under UU PDP you can ask me to:

• See the personal data I hold about you
• Correct it if it's wrong
• Delete it
• Withdraw your consent
• Object to how it's used

Email hello@ataullis.comand I'll action it. You also have the right to complain to the relevant Indonesian data protection authority.

Children

This service is intended for people aged 18 and over. I don't knowingly collect personal data from children.

Security

I take reasonable steps to keep your data safe, but no method of transmission or storage is completely secure.

Changes

I may update this policy from time to time. The date at the top shows when it was last changed.