Privacy Policy

01.Data Controller Identity

This portfolio website (https://binodstha.com.np) is owned and operated by Binod Shrestha, Senior Frontend Engineer & Technical Lead based in Kathmandu, Nepal.

For any inquiries regarding data protection, access requests, or privacy practices, you can reach me directly via email at bnod.shrestha69@gmail.com.

02.Information We Collect

We believe in data minimization. We only collect the minimum information necessary:

• Direct Inquiries (Contact Form): When you submit a message via our contact form, we collect your name, email address, optional subject, and message contents. These are transmitted directly via authenticated TLS SMTP to my secure mailbox. We do not store your contact submissions in a marketing database or CRM.
• Technical Diagnostic Data: To protect the site against abusive requests, DDoS attacks, and automated spam bots, our backend API processes temporary request headers (client IP address and user-agent string) solely for in-memory rate limiting and honeypot bot mitigation. This diagnostic data is never sold or combined with identifying profiles.
• Analytics Telemetry (Optional): If and only if you provide explicit consent through our Cookie Banner or Preference Center, we use Google Analytics 4 (GA4) to collect aggregated, anonymized metrics (e.g. pages visited, approximate geographic region, browser type, and résumé downloads). IP anonymization is enforced, and advertising tracking features are disabled.

03.Legal Bases for Processing (GDPR Article 6)

Under the European Union General Data Protection Regulation (GDPR), we process data under:

• Consent (Art. 6(1)(a)): For non-essential analytics cookies and tracking telemetry, as well as voluntary contact inquiry submissions where you agree to communication.
• Legitimate Interests (Art. 6(1)(f)): For maintaining infrastructure uptime, preventing denial-of-service attempts, trapping automated spambots, and responding directly to professional inquiries.

04.Third-Party Services & Subprocessors

We work with trusted industry providers for web hosting and telemetry:

05.Data Retention

Inquiries sent via the contact form are retained in my professional email inbox for as long as necessary to conduct business discussions or evaluate technical partnerships, after which they are archived or permanently removed. In-memory IP rate-limit records expire automatically within minutes. Aggregated analytics reports in GA4 are retained in compliance with standard Google Analytics retention windows.

06.Your Privacy Rights

Regardless of your geographic location, you have the right to:

• Request access to any personal information we hold about you.
• Request rectification or erasure of your personal data.
• Withdraw consent for analytics cookies at any moment via the Cookie Settings.
• Lodge a complaint with a relevant data protection supervisory authority.

To exercise any of these rights, please email bnod.shrestha69@gmail.com.