• 1.1 This Privacy Policy (the “Policy”) explains how Usman Zaavi, trading as “Words by Usman” (the “Provider,” “I,” “me,” “my,” or “we”), collects, uses, stores, shares, and protects personal information when you visit https://wordsbyusman.com (the “Website”), contact me, or engage my content writing, copywriting, and SEO services (the “Services”).
• 1.2 This Policy applies to visitors of the Website, prospective clients, clients, and any other person who communicates with me. It should be read together with my Terms of Service at https://wordsbyusman.com/terms-of-service/.
• 1.3 By using the Website or submitting personal information to me, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the Website or provide personal information.

2.1 For the purposes of applicable data protection laws, the data controller is:

2.2 Questions, requests, and complaints about this Policy or my handling of personal information may be sent to the email address above.

In this Policy:

• “Personal Information” means any information that identifies, relates to, or can reasonably be linked to an identified or identifiable individual.
• “Processing” means any operation performed on Personal Information, including collection, storage, use, disclosure, and deletion.
• “Client Materials” has the meaning given in the Terms of Service.
• “Data Protection Laws” means all laws applicable to the Processing of Personal Information, including, where applicable, the EU General Data Protection Regulation (“GDPR”), the UK GDPR and Data Protection Act 2018, the California Consumer Privacy Act as amended (“CCPA”), and the laws of Pakistan.

4.1 Information You Provide Directly

When you contact me, request a quote, book a call, subscribe to updates, or engage the Services, you may provide:

• (a) Identity and contact details: your name, email address, telephone or WhatsApp number, job title, company name, and website address;
• (b) Enquiry and project information: your goals, target audience, industry, budget, timelines, content requirements, and any other details you include in your messages or forms;
• (c) Client Materials: briefs, brand guidelines, product information, documents, login or platform access you choose to share, and feedback on Deliverables;
• (d) Billing information: your billing name, address, tax identification details, invoice history, and payment references. I do not store full payment card numbers, which are handled by third-party payment processors; and
• (e) Communications: the content of emails, WhatsApp messages, calls, and messages you send me, including any testimonials or reviews you choose to give.

4.2 Information Collected Automatically

When you visit the Website, certain information is collected automatically through cookies and similar technologies, including:

• (a) your IP address and approximate geographic location;
• (b) device type, operating system, browser type and version, and screen resolution;
• (c) pages viewed, links clicked, time on page, scroll behaviour, and navigation paths;
• (d) referring website, search terms, and campaign source; and
• (e) date and time of visits and basic diagnostic and error information.

4.3 Information from Third Parties

I may receive Personal Information about you from third parties, including: referrers who recommend my Services; professional networks such as LinkedIn when you contact me through them; business directories and publicly available sources; and agencies or intermediaries who engage me for white-label work on behalf of their clients.

4.4 Sensitive Information

I do not seek to collect sensitive Personal Information (such as health, financial account, biometric, or government identification data). Please do not include such information in forms, messages, or Client Materials unless the project strictly requires it, in which case we will agree on appropriate handling in advance.

• 5.1 The Website uses cookies, which are small text files placed on your device, and similar technologies such as pixels and local storage.
• 5.2 Categories of Cookies:
  • (a) Strictly necessary cookies: required for the Website to function, security, and forms (e.g., WordPress, Elementor, WPForms);
  • (b) Performance and analytics cookies: help understand visitor usage to improve performance (e.g., Google Analytics);
  • (c) Functionality cookies: remember preferences where features exist.
• 5.3 Managing Cookies: Where required by law, I request consent before placing non-essential cookies. You can control or delete cookies through browser settings. Opt out of Google Analytics via the Google Analytics Opt-out Browser Add-on.
• 5.4 Do Not Track: The Website does not currently respond to “Do Not Track” browser signals due to lack of uniform standards.

I use Personal Information for the following purposes:

• (a) to respond to your enquiries, schedule discovery calls, and prepare proposals and quotations;
• (b) to provide, manage, and deliver the Services, including researching your industry, creating Deliverables, and communicating about progress and feedback;
• (c) to issue invoices, process payments, keep financial records, and comply with tax and accounting requirements;
• (d) to maintain and improve the Website, its content, security, and performance;
• (e) to analyse Website traffic and understand which content is useful to visitors;
• (f) to send updates, articles, or offers where asked or permitted by law (with opt-out ability);
• (g) to showcase work in my portfolio, case studies, and testimonials (subject to Terms of Service);
• (h) to detect, prevent, and address fraud, abuse, security incidents, and technical problems;
• (i) to establish, exercise, or defend legal claims and enforce Terms of Service; and
• (j) to comply with legal obligations and respond to lawful requests from authorities.

I do not use Personal Information to make solely automated decisions that produce legal or similarly significant effects.

If you are located in the EEA, UK, or similar jurisdiction, I rely on the following legal bases:

• (a) Contract: necessary to enter into or perform a contract or pre-contractual steps at your request;
• (b) Legitimate interests: necessary for operating and improving business and securing the Website, provided rights are not overridden;
• (c) Consent: where given (e.g., non-essential cookies, marketing emails), which can be withdrawn at any time; and
• (d) Legal obligation: necessary to comply with applicable laws.

• 8.1 I do not sell your Personal Information, and I do not share it for cross-context behavioural advertising.
• 8.2 Disclosures:
  • (a) Service providers: Trusted third parties processing data on instructions (hosting, WordPress, Elementor, WPForms, Rank Math, Google Analytics, WhatsApp, cloud storage, payment processors);
  • (b) Team Members: Contractors, editors, and researchers bound by confidentiality;
  • (c) Professional advisers: Accountants, lawyers, insurers where necessary;
  • (d) Legal/Safety: Court orders, lawful authority requests, or enforcing rights/safety;
  • (e) Business transfers: In case of business sale, merger, or transfer;
  • (f) With consent: Displaying testimonials or explicit agreement.
• 8.3 Each third-party provider operates under its own terms and privacy policy.

• 9.1 Based in Pakistan, personal information may be transferred to and processed in Pakistan, the US, and other countries with differing data protection laws.
• 9.2 Safeguards: Transfers from EEA/UK rely on approved standard contractual clauses, adequacy decisions, or explicit consent where lawful.
• 9.3 Submitting data acknowledges these international transfers.

10.1 Data is retained only as long as necessary to fulfill purpose or satisfy law.

10.2 Typical Durations:

• (a) Non-client Enquiries: Up to 24 months from last contact;
• (b) Project/Client Records: Duration of engagement + up to 6 years for legal/dispute defense;
• (c) Financial Records: As mandated by tax and accounting laws;
• (d) Marketing Data: Until unsubscribed or deletion request;
• (e) Analytics/Cookies: Typically max 26 months.

10.3 Expired data is deleted or anonymized. Client Materials deleted upon written request subject to law.

• 11.1 Reasonable technical measures (HTTPS encryption, access control, strong authentication) protect data against unauthorized access, loss, or disclosure.
• 11.2 Electronic transmission cannot be guaranteed 100% secure. You are responsible for protecting account credentials.
• 11.3 Breach Notification: Impacted individuals and authorities will be notified in accordance with applicable legal requirements.

12.1 Rights Summary: Access, Correction, Deletion, Restriction, Objection, Data Portability, Consent Withdrawal, and Supervisory Authority Complaints.

12.2 How to Exercise: Submit written requests to contact@wordsbyusman.com. Verification required. Response provided within 1 month.

12.3 Limits: Requests may be limited where permitted by law or to defend legal rights. Reasonable requests incur no fees.

• 13.1 CA/US residents have rights to know, access, correct, delete, and opt-out of sale/sharing without discrimination.
• 13.2 CCPA Disclosure: Collected categories include identifiers, commercial info, internet activity, and professional details. No data sold or shared for cross-context behavioral ads in past 12 months.
• 13.3 Authorized agents may submit requests with written permission.

• 14.1 Marketing communications sent only with consent or client relationship.
• 14.2 Opt-out: Click “unsubscribe” in emails or contact contact@wordsbyusman.com. Service/billing emails will still be sent.

• 15.1 Confidentiality: Client Materials handled strictly as confidential information under Terms of Service.
• 15.2 White-Label: Intermediary customer data processed solely per instructions. Agencies responsible for notices/consents.
• 15.3 Third-Party Sharing: Client confirms right to share third-party details (interview subjects, employees).

16.1 Links to external platforms (LinkedIn, X, WhatsApp) governed by third-party policies.

16.2 Messaging via WhatsApp subject to WhatsApp terms and privacy policies.

Services are intended for adults (18+). Data from minors under 18 is not knowingly collected and will be deleted immediately if discovered.

18.1 Updates posted with revised “Last Updated” date.

18.2 Material changes notified via website notice or email.

Governed by the laws of Islamic Republic of Pakistan without overriding mandatory residency rights. Disputes resolved per Terms of Service.

If not satisfied, you may contact your local data protection authority. By using the Website or engaging Services, you confirm reading and understanding this Privacy Policy.