Last updated 23 August 2026. This version takes effect on the day it is published.
This policy explains what shaheer.ceo collects, why, and what you can do about it. This is a personal website published by Hassan Shaheer. It is a static site: there are no user accounts, no comments, no logins, and nothing for you to upload.
Who we are
This website is https://shaheer.ceo, the personal site of Hassan Shaheer, Founder and CEO of SGOC LTD (Shaheer Group of Companies Limited).
Hassan Shaheer is the data controller for this site, which means he decides what is collected and why, and is answerable for it. For any privacy question, or to exercise any of the rights described below, write to [email protected].
What we collect
Two things, and only two.
Analytics. The site uses Cloudflare Web Analytics to count visits and understand which pages people read. It records the page requested, the referring site, and a coarse device and country signal. It sets no cookies, stores nothing in your browser, and does not fingerprint your device, so it cannot follow you between visits or across other websites. We do not run advertising or remarketing on this site.
What you send us. If you fill in the contact form, we receive the name, email address and message you type into it, so that we can reply. Nothing more is collected, and the form is the only place on this site where you can give us personal information.
What we do not collect
We do not sell your data, ever. We do not build advertising profiles. There are no user accounts, so we hold no passwords. There is no comment system. We do not ask for payment details, and none are processed here.
Who else is involved
Two service providers touch data as you use this site:
Cloudflare both delivers the site and provides the analytics described above, so it processes your IP address and request as a normal part of serving the page to you. Web3Forms delivers contact-form submissions to our inbox, and only when you choose to send one. Each acts on our behalf; neither is given your data for their own marketing.
Why we are allowed to do this
European and UK law asks anyone handling personal data to name the ground they are relying on. Ours are simple.
Analytics runs on legitimate interest. Knowing which pages people read is a normal thing for a site owner to want, and the data is aggregate and identifies nobody, so it costs you nothing. If cookies or personal identifiers were involved this ground would not be available and we would have to ask your permission first. They are not, so we do not.
Replying to you runs on your request. When you send the contact form you are asking for a reply, and we cannot give you one without your name, address and message.
Serving the page runs on legitimate interest. Your IP address has to be processed for a page to reach you at all. There is no way to deliver a website without it.
Where in the world your data goes
Cloudflare and Web3Forms are United States companies, so data touching them may be processed outside the UK and the European Economic Area. A transfer like that needs a recognised safeguard behind it. We rely on the data processing terms each provider publishes, which is where the Standard Contractual Clauses approved by the European Commission, or certification under the EU-US Data Privacy Framework, sit. If you want to see the current terms for either provider, ask and we will point you at them.
In plain terms: what crosses a border here is your IP address in the course of delivering a page, and anything you deliberately type into the contact form. Nothing else leaves this site.
How long we keep it
Analytics is aggregate only and holds nothing that identifies you, so there is nothing about you in it to delete. Cloudflare retains that aggregate data for a limited period and then discards it; their own privacy policy governs it. Contact-form messages are kept in our email for as long as needed to handle your enquiry and any ordinary business follow-up, then deleted on request at any time.
Cookies
This site sets no cookies at all. Not for analytics, not for preferences, not for anything else. There is no cookie banner because there is nothing to consent to. If your browser shows a cookie from this domain, something is wrong and we would like to hear about it.
Embedded content
Some pages link out to profiles and articles on other websites. Following those links takes you onto sites with their own privacy policies, over which we have no control. This policy covers shaheer.ceo only.
Nothing on this site is embedded from a third party. The fonts, styles, scripts and images are all served from shaheer.ceo, so simply reading a page does not hand your details to anyone else.
Your rights
You can ask what personal data we hold about you, ask for a copy of it in a portable form, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, or object to it altogether. Email [email protected] and we will respond within 30 days. Exercising any of these costs nothing and we will not treat you differently for it.
If you are in the UK or the EU you may also complain to your local data protection authority. In the UK that is the Information Commissioner's Office.
Realistically, the only personal data we are likely to hold about you is an email you sent us, because nothing else here identifies anyone.
No automated decisions. Nothing on this site profiles you or makes a decision about you automatically. There is no algorithm here deciding anything that affects you.
Children. This site is aimed at adults doing business and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has sent us something, write to us and we will delete it.
If you are in California
California law gives you a specific set of rights, and asks us to be explicit about a few things.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We never have. There is no "Do Not Sell or Share My Personal Information" link on this site because there is nothing to opt out of.
What is collected, at the point of collection: internet activity, meaning the page you requested and the site you arrived from, held in aggregate; and identifiers, meaning your IP address while a page is being served, plus the name and email address you type into the contact form if you choose to use it. Nothing is collected for advertising, and none of it is sold.
Who it is disclosed to: Cloudflare, for delivering the site and providing aggregate analytics, and Web3Forms, for delivering contact-form messages. Both act as service providers under contract and may not use it for their own purposes.
Non-discrimination. If you exercise any of these rights we will not deny you anything, charge you a different price, or give you a lesser experience.
To exercise a California right, email [email protected].
Changes to this policy
If this policy changes, the revised version will be posted here with a new date at the top.