Privacy notice.

WaqasWebPro is the trading name of Waqas Mehmood, working from Lahore, Pakistan. I decide what happens to the information described here, and I am the person you contact about it: [email protected].

Only what you send, plus the technical records any web server keeps in order to work.

• The contact form: your name, email address, and optionally your website address, company, country, the service you are asking about and a rough budget, plus the message you write
• The free website review form: your name, email address and website address, plus anything you ask us to look at
• Email and WhatsApp: whatever you choose to put in the messages you send me
• Server and network records: IP address, browser and operating system, the pages requested and when. These are kept by the hosting server and by Cloudflare, which sits in front of the site
• Nothing else. There is no account to create and no profile built about you. The only email you get beyond a reply to your enquiry is the optional monthly one described below, and only if you tick the box for it

What you send through either form is recorded in a private enquiry system on the same server, and an email notification is also sent to me when that route is switched on. The form only tells you your message arrived when at least one of the two actually accepted it. The system is password protected, it is not reachable from the public internet without signing in, and I am the only person with an account on it.

It holds exactly what is listed above and nothing more. Your IP address and browser are deliberately not stored there, and no note is kept about you beyond what is needed to answer you and deliver work you have asked for.

If both delivery routes were to fail at once, your message would be written to a file on the same server so it could still be answered by hand. It is treated exactly like everything else here and deleted on the same schedule.

This changed on 20 August 2026. Until then the site measured nothing at all. It now can, but only if you say yes, and this section is the explanation this page promised to write before that happened.

The first time you visit you are asked one question, in a small panel at the bottom of the screen. Until you answer it, and if you answer no, NOTHING analytics related loads: no script, no cookie, and no request to Google or to Microsoft from your browser. The site behaves exactly the same either way, and nothing is withheld from you for saying no.

If you say yes, two things are loaded through Google Tag Manager.

• Google Analytics 4, which counts pages viewed, roughly where in the world the visit came from, which site or search sent you, and what kind of device you are on. It sets its own cookies to tell one visit from another
• Microsoft Clarity, which records how the page was used: scrolling, clicks, and where people give up. It can replay that as an anonymous session so I can see which part of a page is confusing
• Neither is used to advertise to you. There is no advertising tag on this site, advertising storage is switched off permanently in the configuration, and nothing here is shared with an advertising network

Your answer is remembered in your browser's local storage rather than in a cookie, because recording that somebody declined tracking by setting a tracking cookie would be absurd. Local storage is not sent to the server with every request, which is the practical difference.

There is an Analytics choice link in the footer of every page. It reopens the same question and you can change the answer as often as you like.

One honest limitation. If you agreed earlier in a visit and then change to no, the tags stop and nothing loads on any future visit, but a script that has already run in that page cannot be un-run. Reloading the page clears it completely. This is said plainly because the alternative is implying a clean reversal that a browser cannot actually give.

Clearing your browser data also clears the answer, and you will be asked again next time.

Cloudflare sits in front of this site and protects it. It may set a strictly necessary cookie to tell a real visitor apart from automated traffic. It is not used to profile you and not used to advertise to you, and it is not something a consent choice can switch off without switching off the protection with it.

Cloudflare may also measure how quickly pages load in your browser and send those timings back to Cloudflare. It sets no cookie and is not used to identify you or to advertise to you.

Google Search Console, where it is used, involves nothing in your browser at all. It reports on what Google has already crawled and how the site appears in search results. It cannot see visitors.

Your details are never sold, rented, or handed to anyone for marketing.

Sending an enquiry does not put you on a mailing list. There is a separate tick box on the form, left unticked, which is the only way anybody joins one. If you leave it alone, and almost everybody does, you will only ever hear back about the thing you asked about.

• To read your enquiry and reply to it
• To quote, plan and deliver work you have asked for
• To keep the server secure and to investigate abuse or an attack
• To meet record keeping obligations for invoices that have been issued
• To see which pages get read and where people give up, so the site can be made clearer. Only if you agreed to analytics, and never to build a profile of you personally

This changed on 21 August 2026, and the previous version of this page is the reason it is being spelled out rather than quietly adjusted. Until that day this page said that sending an enquiry would not add you to a mailing list, with no qualification. There is now a way to join one, and it is worth being precise about how it works.

There is a tick box on the contact form. It is unticked. Ticking it is a separate decision from sending your enquiry, and your enquiry is sent either way. Nothing about the reply you get depends on it.

• If you leave it unticked you get an answer to your enquiry and nothing else, ever
• If you tick it, you might get something useful about once a month, on keeping a site fast, secure and found
• Every one of those has a link to stop, it works immediately, and you are never asked to explain why
• You can also just reply and say stop, or send one line to the address at the bottom of this page. However you ask, it is honoured the same day

The date you agreed is recorded, along with the exact wording you were shown. That is not to keep tabs on you. It is so that if you ever ask how you came to be on a list, the answer is a specific date and a specific sentence rather than somebody's recollection.

ONE THING WORTH SAYING PLAINLY. Anybody who sent an enquiry before 21 August 2026 was told, in writing, that it would not put them on a mailing list. Changing this page does not reach backwards. Those enquiries are not on any list and will not be added to one.

• Answering an enquiry and delivering a project: performance of a contract, or steps taken at your request before entering one
• Keeping the server secure and preventing abuse: legitimate interests
• Keeping invoice records: a legal obligation
• Analytics: your consent, and nothing else. That is why you are asked rather than told, why nothing loads before you answer, and why the answer can be changed from the footer at any time
• Any email that is not a reply to you: your consent, given by ticking a box that starts unticked. Withdrawn the moment you say so

Only the suppliers needed to run the site and answer you, and only as far as their part of the job requires.

• Hostinger, which provides the server the site runs on, and the same server the enquiry system runs on
• Cloudflare, which provides DNS and sits in front of the site
• The email provider that carries the contact form message and my replies
• Google, for Tag Manager and Analytics, and Microsoft, for Clarity. ONLY if you agreed. Say no and your browser never contacts either of them
• Nobody else. No advertising network and no data broker, and nothing about you is ever sold or handed over for marketing

The server is in Malaysia and I read the messages in Pakistan. Cloudflare and the email provider operate globally. If you are in the UK or the EU, that means your information is processed outside your own region.

If your organisation needs a specific data processing arrangement before you can send information, say so and it can be agreed in writing first.

• Enquiries that do not become projects: up to 24 months, then deleted
• Project correspondence and files: for the length of the working relationship and 24 months after it, so a question about your own site can still be answered
• Invoices and payment records: as long as tax record keeping requires
• Server and Cloudflare logs: short lived, and controlled by those providers rather than by me
• A record that you asked to stop receiving email: kept indefinitely, on purpose. It is the only way to be sure you are not written to again by accident, and deleting it would defeat the point of having asked
• Analytics data, if you agreed to it: held by Google and by Microsoft on their own schedules. Google Analytics on this site is set to the shortest retention it offers, and Clarity keeps a recorded session for a limited period before deleting it

Ask me at [email protected] and it gets done. There is no form and no charge, and I do not need a reason.

• A copy of what I hold about you
• Correction of anything that is wrong
• Deletion of your enquiry and correspondence, except where an invoice record has to be kept
• An objection to any particular use
• A complaint to your local data protection authority if you are not satisfied with my answer

The site is served over HTTPS, the server is firewalled and kept updated, and the contact form is rate limited and validated on the server. Access to the mailbox is protected by two factor authentication.

No system is immune to failure, and this notice will not claim otherwise. If information about you is ever exposed in a way that puts you at risk, you will be told promptly and plainly.

This is a service for businesses. It is not aimed at children and no information is knowingly collected from anyone under 16.

This page was last updated on 17 September 2026. If what the site collects changes, this notice changes first.