Privacy Policy

Who we are
This website is operated by mohamedshawesh.com. We are the data controller for personal data processed through this site. Contact: contact@mohamedshawesh.com. If you appoint a DPO: Data Protection Officer: contact@mohamedshawesh.com.

1) What data we collect

  • Provided by you: identification and contact data (name, email, phone), messages sent via forms, newsletter subscriptions.
  • Automatically collected: device/usage data, IP address (anonymised for analytics), cookies/identifiers.
  • From third parties: subscription data submitted via Wix iframe (newsletter block).

2) Why we process your data & legal bases

Purpose Examples Legal basis
Site operation & security WordPress, hosting logs, anti-spam, uptime Legitimate interests (running a secure site)
Analytics & audience measurement Google Analytics 4 (Consent Mode, IP anonymisation) Consent (non-essential cookies)
Newsletter / updates Email sign-up via Wix iframe Consent
Enquiries / contact Responding to your messages Legitimate interests or pre-contractual steps
Compliance Legal claims, accounting records Legal obligation / legitimate interests

You may withdraw consent at any time (see Your rights).

3) Cookies & trackers

We use cookies and similar technologies. On your first visit, a banner lets you accept, refuse, or customise non-essential cookies.

Types we use

  • Strictly necessary (essential): required for WordPress and security; cannot be switched off.
  • Analytics: Google Analytics 4, used to understand site usage. GA4 is configured with IP anonymisation and Consent Mode; analytics run only after consent.
  • Functional/Embedded: the Wix newsletter iframe may set cookies to operate the subscription form.

Example cookie table (complete with your setup)

Name Provider Purpose Expiry Type
_ga Google Analytics (GA4) 13 months 1st-party
ga* Google Session state for GA4 13 months 1st-party
wp_* / elementor WordPress/Elementor Site functionality Session/1 year 1st-party
wixVisitorId / TS* Wix (iframe) Form functionality / security Session/12 months 3rd-party

Manage cookies: wip

Opt-out from Google Analytics: you can withdraw consent via our banner or use Google’s tools in your browser.

4) Third-party processors & transfers

We use trusted providers under data-processing agreements:

  • Hosting / Infrastructure: Hostinger.
  • Analytics: Google Ireland Ltd. (may transfer pseudonymous data to the U.S.; transfers protected by EU Standard Contractual Clauses and Consent Mode safeguards).
  • Newsletter iframe & form handling: Wix.com Ltd. (Israel; EU adequacy decision applies. Wix may use sub-processors in the U.S./elsewhere with SCCs).
  • Email / CRM (if any): contact@mohamedshawesh.com.

We do not sell your personal data.

5) Retention

Data Retention
Analytics data (GA4) up to 14 months (configure in GA4)
Contact form messages up to 12 months after last interaction
Newsletter data until you unsubscribe + up to 24 months for audit logs
Server/security logs 6–12 months unless needed longer for incidents
Contracts/invoices (if any) statutory periods

6) Your rights (GDPR)

You can request access, rectification, erasure, restriction, portability, objection, and withdraw consent at any time. Contact us at contact@mohamedshawesh.com.
You also have the right to complain to your local supervisory authority.

7) Security

We apply technical and organisational measures: HTTPS/TLS, restricted access, server hardening, regular updates, backups, least-privilege accounts, and vendor due diligence.

8) Children

This site is not intended for children under 16. We do not knowingly collect data from minors.

9) Changes

We may update this notice; changes will be posted here with a new “last updated” date.

 

Contact
contact@mohamedshawesh.com
Last updated: 02/01/2025