Privacy Policy
Effective Date: September 04, 2026
This Privacy Policy (the “Policy”) describes how Yoosuf Mohamed, an independent systems architect and technical consultant based in Colombo, Sri Lanka (the “Consultant,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information in connection with the operation of yoosuf.me (the “Site”) and the provision of consulting and engineering services (the “Services”). This Policy applies to all visitors to the Site and to all individuals who engage the Consultant or otherwise provide personal information to us.
By accessing or using the Site, or by providing personal information to the Consultant, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, please do not use the Site or provide us with your personal information.
1. Information We Collect
We collect only the personal information that is necessary for the purposes described in this Policy, which may include the following categories:
- Analytics data. The Site uses Google Analytics to understand aggregate visitor behaviour, including pages visited, approximate geographic location, device and browser type, operating system, and referral source. Google may process IP addresses and related technical signals in connection with this analytics service.
- Server logs. Our hosting provider, GitHub Pages (operated by GitHub, Inc.), may record standard server logs, including IP addresses, browser type, requested resources, and timestamps, in the ordinary course of serving the Site.
- Information you choose to provide. If you contact us by email, book a call through Cal.com, or communicate with us through any other channel, we may collect the information you provide, including your name, email address, organisation, and the content of your communications.
We do not intentionally collect sensitive categories of personal information (such as information relating to health, race, religion, or political opinions), and we do not require accounts or host user-generated content on the Site.
2. Legal Bases for Processing
Where applicable data protection law (including the EU General Data Protection Regulation and the UK GDPR) applies, we process personal information on the following legal bases:
- Legitimate interests. For analytics and site-operations purposes, including understanding how the Site is used, maintaining its security, and improving its content and performance.
- Consent. For the use of analytics cookies where consent is required under applicable law, and for any optional communications you choose to receive.
- Contract and pre-contractual steps. For responding to enquiries and providing Services in connection with an engagement.
- Legal obligations. For compliance with applicable legal, tax, and regulatory obligations.
3. Cookies and Tracking Technologies
The Site uses cookies and similar technologies set by Google Analytics to measure traffic and usage patterns. A cookie is a small text file stored on your device by your browser. You may disable cookies in your browser settings, use browser extensions or tools that block tracking scripts, or opt out of Google Analytics using the Google Analytics opt-out browser add-on. Disabling cookies will not affect your ability to read the Site. Where required by applicable law, we will obtain your consent to the use of non-essential cookies before they are set.
4. Third-Party Services
The Site relies on the following third-party services, each of which operates under its own privacy policy and terms:
- Google Analytics — usage analytics. Data processed by Google is subject to Google’s privacy policy and Google’s data-processing terms.
- Google Fonts — web fonts. When the Site loads fonts, Google may log requests to its font servers.
- Cal.com — call scheduling. If you book a call through the Site, your booking information is processed by Cal.com under its privacy policy.
- GitHub Pages — hosting. GitHub serves the Site and may process technical data in connection with hosting, subject to GitHub’s privacy policy.
These third parties are independent data controllers or processors, as applicable, and their processing of personal information is governed by their respective policies, which we encourage you to review.
5. How We Use Information
We use personal information for the following purposes:
- To operate, maintain, secure, and improve the Site and its content.
- To understand how the Site is used and to evaluate the effectiveness of our content.
- To respond to enquiries, provide Services, and manage engagements, including invoicing and communications.
- To comply with applicable legal, tax, and regulatory obligations, and to enforce our legal rights.
We do not sell, rent, or trade personal information. We do not use personal information for purposes that are materially different from those described in this Policy without first notifying you and, where required, obtaining your consent.
6. How We Share Information
We do not disclose personal information except as described in this Policy or as required or permitted by law. We may share personal information: (a) with the third-party service providers identified in Section 4, solely to enable them to provide services to us; (b) where required by law, regulation, court order, or governmental authority; (c) where necessary to protect the rights, property, or safety of the Consultant, our clients, or others; or (d) in connection with a merger, acquisition, reorganisation, or similar transaction, provided that the recipient is subject to obligations of confidentiality comparable to those described in this Policy.
7. International Transfers
The Site is hosted and the services we use are operated, at least in part, from locations outside Sri Lanka, including in the United States and other countries. Accordingly, personal information may be transferred to, and processed in, countries other than your country of residence, which may have data protection laws that differ from those of your jurisdiction. Where we transfer personal information from the EU, the UK, or other jurisdictions that impose transfer restrictions, we take appropriate safeguards, including relying on recognised transfer mechanisms or adequacy decisions, to the extent required by applicable law.
8. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including for the purpose of satisfying legal, accounting, or reporting requirements. In particular:
- Analytics data is retained in accordance with Google Analytics’ retention settings.
- Communications and engagement-related information are retained for as long as necessary to manage enquiries, engagements, and any applicable legal obligations.
9. Your Rights
To the extent provided by applicable law, you may have the following rights in respect of your personal information:
- Access — to request a copy of the personal information we hold about you.
- Rectification — to request correction of inaccurate or incomplete personal information.
- Erasure — to request deletion of personal information, subject to legal obligations to retain it.
- Restriction — to request that we restrict processing in certain circumstances.
- Portability — to request a copy of personal information you have provided, in a structured, machine-readable format.
- Objection — to object to processing based on legitimate interests or to direct marketing.
- Withdrawal of consent — to withdraw any consent you have given at any time, without affecting the lawfulness of processing that occurred before withdrawal.
To exercise any of these rights, or to ask questions about this Policy, contact us at [email protected]. We will respond to verifiable requests within a reasonable timeframe and within any time period required by applicable law. We may request information to verify your identity before responding to a request. You also have the right to lodge a complaint with a supervisory authority in the jurisdiction in which you reside or work, where applicable.
10. Security
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, use, alteration, and disclosure, including using encryption in transit where appropriate. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee the absolute security of personal information.
11. Children’s Privacy
The Site is not directed to individuals under the age of sixteen (16), and we do not knowingly collect personal information from children. If you believe that we have inadvertently collected personal information from a child, please contact us at [email protected] and we will take reasonable steps to delete such information.
12. Changes to This Policy
We may update this Policy from time to time. Any changes will become effective upon posting on this page, and the “Effective Date” above will be updated accordingly. We will take reasonable steps to notify you of material changes, including by updating the effective date of this Policy. Your continued use of the Site or engagement of the Consultant after the posting of any changes constitutes your acceptance of the revised Policy.
13. Contact
Questions or requests relating to this Privacy Policy may be directed to:
Yoosuf Mohamed [email protected]
Last updated: September 04, 2026