Privacy Notice
Last updated 13 August 2026
This notice explains what happens to your personal information when you contact me through this website or subscribe to the newsletter. It is written to be read, rather than to be impenetrable.
Who is responsible for your information
The data controller is H & N Yousaf Ltd, a company registered in Scotland under number SC821878, registered with the Information Commissioner's Office.
For anything to do with your data, write to pa@humzayousaf.scot. A postal address is available on request.
What is collected, and why
If you send an enquiry, the form asks for your name, email address, organisation, the nature of your enquiry and your message. This is used to respond to you and, where it leads somewhere, to carry on that correspondence.
The lawful basis is legitimate interests: you have asked to be contacted, and replying to you is the obvious and expected consequence.
If you subscribe to the newsletter, the form asks for your first name and email address. These are used to send you the newsletter and nothing else.
The lawful basis is consent, which you give by subscribing and can withdraw at any time using the unsubscribe link at the foot of every edition. Withdrawing is immediate and needs no explanation.
Your information is never sold, rented, or passed to anyone for their own marketing.
Who else handles it
A small number of service providers process this information on my behalf. Each is bound by contract to protect it and to use it only for the purpose it was given.
| Provider | What they do |
|---|---|
| Formspree | Receives and forwards enquiry form submissions |
| Kit (formerly ConvertKit) | Holds the newsletter list and sends the newsletter |
| Netlify | Hosts this website |
| Google Workspace | Provides the email accounts correspondence is held in |
These providers are based in the United States, so your information is transferred outside the United Kingdom. Each transfer relies on safeguards approved for that purpose, including the UK extension to the EU-US Data Privacy Framework or the International Data Transfer Addendum to the standard contractual clauses.
How long it is kept
- Enquiries that go nowhere: deleted within 12 months.
- Enquiries that become work: kept for the duration of that work and then for 6 years, because tax and contract records require it.
- Newsletter subscribers: kept until you unsubscribe. If you unsubscribe, a record of your email address is retained solely to make sure you are not added again by mistake.
Cookies and tracking
This website sets no cookies, runs no analytics, and carries no advertising or social media tracking. Nothing here follows you around the internet.
The one exception worth naming: the typefaces are served by Google Fonts, which means your browser makes a request to Google's servers and Google may log your IP address as part of that. Nothing else is shared with them.
Your rights
You can ask to see the information held about you, to have it corrected, to have it deleted, to restrict how it is used, to receive a copy in a portable form, or to object to its use. Where processing relies on consent, you can withdraw that consent at any time.
Write to pa@humzayousaf.scot and you will have a response within one month.
If you are unhappy with how your information has been handled, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. I would rather you raised it with me first, but that is your right and it does not depend on my agreement.
Changes
If this notice changes in any way that matters, the date at the top will change and, where the change is significant, subscribers will be told directly rather than left to notice.