Your data · UK GDPR
Privacy Policy
What I collect on this website and in my tools, every place I collect it, how I track visitors (only with your consent), why, who sees it, how long I keep it, and how to use your rights.
4
Forms collect dataContact, newsletter pop-up, Ecommerce SEO Optimiser account, blog comments.1
Analytics toolGoogle Analytics 4, and only if you choose "Accept".0
Advertising trackersNo ad cookies, pixels, session recording, or selling of data.8
Rights you can useAccess, correct, delete, restrict, move, object, withdraw consent, complain.01Who is responsible for your information
This website, zeeshanbashir.com, and its free tools are run by WAQZEE GROUP LTD, trading as Waqzee Digital, a company registered in England and Wales. WAQZEE GROUP LTD is the "controller" of the personal information described on this page: it decides why and how it's used. In this policy, "I", "me" and "my" mean Zeeshan Bashir, the consultant behind the site, acting for WAQZEE GROUP LTD.
- Company: WAQZEE GROUP LTD (trading as Waqzee Digital), company number 15836895
- Registered office: 3 Appleton Gate, Newark, England, NG24 1JR
- Contact address: 1 Hales Place, Stoke-on-Trent, ST3 4NF
- Email: me@zeeshanbashir.com · Phone: +44 7384 500964
There is no separate data protection officer, so privacy questions come straight to me. This policy follows the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR), as updated by the Data (Use and Access) Act 2025.
02Where I collect your information
There are four places on this site where you can give me personal information through a form, plus the ways you might contact me directly. Here is every one, what it collects, why, and how long I keep it.
| Where | What you give me | Why, and my lawful basis | How long I keep it |
|---|---|---|---|
| Contact and free consultation form /contact/ and every "Book a free consultation" button | Your name, email address, and the message and details you choose to add. | To reply and arrange a call. Legitimate interests and taking steps at your request before any agreement. | Up to 24 months after our last contact, then deleted. |
| Weekly "Pain Point Brief" sign-up the pop-up form | Your email address and your sector. I also record your consent: date, time and the page you were on. | To send the brief you asked for. Consent: the box is never pre-ticked, and you can withdraw it with one click. | Until you unsubscribe. Then I keep only your address on a do-not-email list and the consent record, so I never email you by mistake. |
| Ecommerce SEO Optimiser account sign up, sign in, or "Continue with Google" | Your name and email, plus a password (stored as a one-way hash I cannot read) or your Google account ID. Optionally your company, three profile answers (your role, platform and goal) and an unticked box for monthly tips. | To create your account, save your reports and tailor the results. Contract (providing the service you asked for). Tips emails only with consent. | Until you delete your account, or after 24 months without signing in. |
| Optimiser reports checks, saved reports, emailed reports and share links | The page addresses you check, the results, any email address you type to send a report to, and your optional note. | To run and save your checks and to send a report when you ask. Contract and legitimate interests. | Saved reports are deleted automatically after 12 months, or sooner if you delete them or your account. Share links last until you switch them off. |
| Optimiser free preview no account needed | No personal information. A short-lived cookie keeps your preview while you sign up, and your IP address is used briefly to limit abuse. | Legitimate interests (security and fair use). | 24 hours. |
| Blog comments | Your name, email address, optional website, your comment and your IP address (WordPress records it). | To publish and moderate comments. Legitimate interests; the optional "remember me" cookie is set only if you tick the box. | Until you ask me to remove it. Your email address is never shown publicly. |
| Email, phone or LinkedIn | Whatever you send me. | To respond to you. Legitimate interests. | Up to 24 months after our last contact. |
My four free planning tools (the SEO Growth Model Calculator, Content Mapping Tool, Content ROI Calculator and SEO Metrics Selector) run entirely in your browser. What you type into them stays on your device: it is not stored on my server and not sent to me or anyone else. Any CSV you download is created on your own device.
Information collected automatically
| What | What it includes | Why, and my lawful basis | How long |
|---|---|---|---|
| Server and security logs | IP address, browser type, the page requested and the time. | To keep the site running and secure. Legitimate interests. | Kept by my hosting provider for a limited period, then overwritten. |
| Google Analytics 4 only if you accept | Pages viewed, time on page, device and browser, approximate location (city level) and how you arrived. A random ID is kept in cookies. | To learn which content is useful. Consent, collected before anything is set. | No longer than 14 months. |
| Cloudflare Turnstile security check | Technical signals that tell a person from a bot. It loads only when you start using a form. | To stop automated abuse. Legitimate interests. | Handled by Cloudflare; I do not store it. |
| Google Fonts | Your IP address is sent to Google so the font can load. | To display the site correctly. Legitimate interests. | Not stored by me. |
03Tracking, analytics and cookies
I ask before I track you. When you first arrive, a banner lets you accept, reject or manage optional cookies. Nothing optional is switched on until you choose, rejecting is as easy as accepting, and the site works the same either way.
What I use
- Google Analytics 4 (through the Site Kit plugin), to count visits and see which pages help. It runs only if you accept analytics cookies.
- Strictly necessary storage, which needs no consent: sign-in cookies for optimiser members, and a short-lived cookie holding your free preview while you sign up.
- Cloudflare Turnstile, a bot check that loads only once you start a form.
What I do not do
- No advertising cookies or retargeting
- No Facebook, LinkedIn or TikTok pixels
- No session recording or heatmaps
- No device fingerprinting
- No selling or renting of your data
- No automated decisions with legal effect
Every cookie is listed, with its purpose and lifespan, in my Cookie Policy. You can change your choice at any time with the "Cookie settings" button on this page.
04My tools, AI and automated processing
The Ecommerce SEO Optimiser has to fetch and test a live web page, so unlike my planning tools it runs on my server. When you check a page:
- I fetch the public page at the address you give and analyse it. Please only enter pages you're entitled to test, and don't put personal information in the address.
- Google PageSpeed Insights tests the page's speed.
- If AI features are on, the public content of that page (headings, text, schema) is sent to an AI provider to write recommendations and to Google's Gemini to show what an AI search might look up. Your name, email and account details are never sent.
- The results are saved to your account. Anyone with a share link you create can read that report until you switch the link off.
The scores are automated and are a guide, not a decision about you. Nothing is decided about you automatically that has a legal or similarly significant effect.
05My lawful bases, in plain English
- Consent: optional cookies, the weekly brief and monthly tips. You can say no, and withdraw at any time without giving a reason.
- Contract: running your optimiser account and reports, which you asked for.
- Legitimate interests: replying to enquiries, keeping the site secure, stopping abuse and basic record-keeping. I've weighed these against your rights, and you can object at any time.
- Legal obligation: where the law requires me to keep or disclose something.
I only send marketing email to people who opted in. I don't buy lists.
06Who I share your information with
I never sell your information. I share it only with the services that help me run the site, and only what each one needs:
| Who | What they do | What they receive |
|---|---|---|
| Website hosting provider | Stores the site, forms and accounts. | Everything stored on the site. |
| Analytics (if you accept), PageSpeed Insights, Gemini (live AI search check) and "Continue with Google". | Analytics data; the public page address and content; your Google name, email and ID if you sign in with Google. | |
| Cloudflare | Turnstile bot check. | Technical signals from your browser when you use a form. |
| AI provider (NVIDIA) | Writes recommendations for a page. | The public content of the page you checked only. |
| Email service provider | Sends the weekly brief, tips and any emailed reports. | Your email address and the message. |
| Cookie consent provider (Civic UK) | Shows the cookie banner. Your choice is stored in a cookie on your own device. | Your cookie choice, held in your browser. |
I may also share information where the law requires it, or to protect my legal rights. If I ever sold or restructured the business, your information would stay protected by this policy.
07Sending information outside the UK
Some of these services, such as Google, Cloudflare and NVIDIA, process information outside the UK, including in the United States. Where that happens I rely on approved safeguards, such as the UK-US data bridge or the ICO's international data transfer agreement or addendum. Ask me if you'd like details for a specific service.
08How long I keep information
I keep personal information only as long as I need it for the reason I collected it, as shown in the tables above. When that time ends, I delete it or make it anonymous. A few specifics:
- Consent records (when you agreed or withdrew) are kept for as long as I need to prove it, and no longer than 6 years.
- Backups are overwritten on a rolling cycle, so deleted information disappears from them when backups are next overwritten on their normal rolling cycle.
- Optimiser accounts can be deleted by you at any time from your account panel, which removes your profile, consent records and every saved report.
09Your rights
You have these rights over your personal information. They're free to use, and I'll reply within one month.
Be informedThis page is how I explain what I do and why.
AccessAsk for a copy of what I hold about you.
CorrectFix anything that is wrong or incomplete.
DeleteAsk me to erase your information in most cases.
RestrictAsk me to pause using it while an issue is sorted out.
MoveGet your information in a portable format you can reuse.
ObjectStop use based on legitimate interests. You can always stop direct marketing.
Withdraw consentAny time. It won't affect anything done before you withdrew.
The quickest ways to use your rights: with an optimiser account, edit your details, change your email preference, download all your data or delete your account yourself from the account panel on the tool page. For anything else, email me@zeeshanbashir.com. I may ask you to confirm who you are first, to protect your information. Every marketing email also has a one-click unsubscribe link.
10Keeping your information safe
The site uses HTTPS. Optimiser passwords are stored as one-way hashes. Reports are private to your account unless you create a share link, which is a long random address you can switch off. Sign-in attempts and checks are rate-limited to stop abuse, and access to the site's admin area is restricted to me. No system is completely secure, but if a breach put your rights at risk, I would tell you and the ICO as the law requires.
11Children
This site and its tools are for business use and are not aimed at anyone under 18. I don't knowingly collect information from children. If you think a child has given me their details, email me and I'll delete them.
12Complaints
If you're unhappy with how I've handled your information, please tell me first at me@zeeshanbashir.com. I'll acknowledge your complaint within 30 days and investigate it without undue delay. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.
13Changes to this policy
If I change how I use your information, I'll update this page and the date at the top. If a change affects something you consented to, I'll ask you again. This version was last updated on 5 October 2026.
Questions about your data?
Ask me directly. I answer every message myself.
Email me@zeeshanbashir.com to see, correct, download or delete your information, change a consent, or raise a concern.
WAQZEE GROUP LTD, trading as Waqzee Digital. Registered in England and Wales, company number 15836895. Registered office: 3 Appleton Gate, Newark, England, NG24 1JR. Contact address: 1 Hales Place, Stoke-on-Trent, ST3 4NF.