Last updated: 25 June 2026
This Privacy Policy explains what personal data we collect when you visit or interact with baderalkandery.com (“the Site”), why we collect it, how it is used and stored, and the rights you have over it.
Who we are
The Site is operated by Bader Alkandery (“we”, “us”), an independent consultant in AML & financial-crime technology, cybersecurity, GRC and secure web development. For any question about this policy or your personal data, contact us at [email protected].
The data we collect and why
- Contact form. When you use our contact form we collect your name, email address, subject and message, so that we can read and reply to your enquiry.
- Comments. If you comment on an article, we collect the name, email address and comment you provide, together with your IP address and browser user-agent, to help detect and reduce spam.
- Analytics. We use Google Analytics 4 (via the Google Site Kit plugin) to understand how visitors use the Site — such as pages viewed, approximate location, device and referral source. This uses cookies and similar technologies. Analytics is not collected from logged-in administrators.
- Technical & security data. Our hosting provider and our CDN/security provider (Cloudflare) automatically log technical information such as your IP address, browser type and the pages you request, to keep the Site secure, available and fast.
- Theme preference. We store a small value in your browser’s local storage to remember your light/dark theme choice. It stays on your device and is not sent to us.
Cookies
The Site uses cookies set by Google Analytics to measure usage, and may use cookies that are necessary for security (for example, by Cloudflare). You can block or delete cookies in your browser settings; the Site will continue to work without analytics cookies.
Why we use your data
We process your data to respond to your enquiries, to operate and secure the Site, and to understand and improve how it is used. Depending on your location, this relies on our legitimate interests in running a professional website and/or your consent where required by law.
Who we share it with
We do not sell your personal data. We share limited data only with the service providers that help us run the Site — including Google (analytics), Cloudflare (security/CDN) and our email and hosting providers — strictly to provide those services. These providers may process data outside your country, including in the United States.
How long we keep it
- Contact enquiries and the emails they generate are kept for as long as needed to handle your request and for a reasonable period afterwards.
- Comments and their metadata are kept until you ask us to remove them.
- Analytics data is retained according to Google’s data-retention settings.
Your rights
Subject to applicable law, you may ask us to access, correct or delete the personal data we hold about you, or object to certain processing. To make a request, email [email protected]. You may also have the right to complain to your local data-protection authority.
Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows when it was last revised.