Privacy & Cookie Policy

Last updated: August 2026

1. Introduction

This Privacy and Cookie Policy explains how farhanasultana.com ("the Site"), operated by Dr. Farhana Sultana ("we", "us", or "our"), collects, uses, stores, and protects information when you visit or interact with the Site. We are committed to protecting your privacy and handling your data transparently and responsibly.

By using the Site, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please discontinue use of the Site.

2. Information We Collect

2.1 Information You Provide Directly

We may collect personal information that you voluntarily provide when you:

• Subscribe to the newsletter: your email address, processed by our newsletter platform (Newsroom) and its email delivery provider (Resend) for the purpose of delivering email communications.

2.2 Information Collected Automatically

When you visit the Site, certain information is collected automatically, including:

• Usage data: pages visited, time spent on pages, referring URLs, and navigation paths through the Site.
• Device and browser information: browser type and version, operating system, screen resolution, and device type.
• Network information: IP address (anonymised where possible), approximate geographic location (country/region level), and internet service provider.
• Cookies and similar technologies: as described in Section 5 below.

2.3 Information We Do Not Collect

We do not knowingly collect sensitive personal information such as financial data, health information, government identification numbers, or information about minors under the age of 16. The Site does not have user accounts, commenting features, or e-commerce functionality.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To deliver newsletter communications: your email address is used to send periodic updates about research, publications, and related academic work.
• To analyse site usage: aggregated and anonymised analytics data helps us understand how visitors use the Site, which pages are most visited, and how to improve the user experience.
• To maintain and improve the Site: technical data helps us ensure the Site functions correctly across different devices and browsers, and to diagnose technical issues.
• To comply with legal obligations: we may process data where required by applicable law or regulation.

4. Legal Basis for Processing (GDPR)

For visitors in the European Economic Area (EEA) and United Kingdom, we process personal data under the following legal bases:

• Consent: where you have given clear consent for us to process your data for a specific purpose, such as subscribing to the newsletter.
• Legitimate interests: where processing is necessary for our legitimate interests (such as understanding Site usage through analytics), provided these interests are not overridden by your data protection rights.
• Legal obligation: where processing is necessary to comply with a legal requirement.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They are widely used to make websites work efficiently and to provide information to site owners.

5.2 Cookies We Use

5.3 Managing Cookies

You can control and manage cookies in several ways:

• Browser settings: most browsers allow you to refuse or delete cookies through their settings. Consult your browser's help documentation for instructions.
• Google Analytics opt-out: you can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on.

Please note that disabling cookies may affect the functionality of the Site or other websites you visit.

6. Third-Party Services

The Site uses the following third-party services, each of which has its own privacy policy:

6.1 Google Analytics (GA4)

We use Google Analytics 4 to collect anonymised data about how visitors use the Site. Google Analytics uses cookies to identify unique visitors and track page views. IP addresses are anonymised. No personally identifiable information is shared with Google for advertising purposes. For more information, see Google's Privacy Policy.

6.2 Newsroom & Resend (Newsletter)

Our newsletter is managed through Newsroom, a newsletter platform operated by vervology, with email delivery handled by Resend. When you subscribe, your email address is stored for the purpose of delivering newsletters, and you will receive a confirmation email before any newsletter is sent to you (double opt-in). Data about email opens and link clicks may be collected to measure engagement. For more information about the delivery provider, seeResend's Privacy Policy.

6.3 Cloudflare (Hosting and Security)

The Site is hosted on Cloudflare's global network using Cloudflare Workers and related services. Cloudflare may process connection and request data to deliver, secure, and monitor the Site. For more information, see Cloudflare's Privacy Policy.

6.4 Embedded Content

Pages on the Site may include embedded content from third-party platforms such as Vimeo or YouTube. When you view a page containing embedded content, these third-party services may set their own cookies, collect data about you, and monitor your interaction with that content, as if you had visited their website directly. We encourage you to review the privacy policies of these platforms.

7. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service providers: with trusted third-party services that help us operate the Site (as listed in Section 6), under appropriate data processing agreements.
• Legal requirements: if required to do so by law, court order, or governmental regulation.
• Protection of rights: to protect the rights, property, or safety of the Site, its users, or the public.

8. Data Retention

• Newsletter subscriptions: your email address is retained until you unsubscribe. You can unsubscribe at any time using the link provided in every newsletter email.
• Analytics data: Google Analytics data is retained for 14 months, after which it is automatically deleted.
• Server logs: hosting and security logs are retained in accordance with Cloudflare's applicable data retention practices and our configured service settings.

9. Data Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include:

• The Site is served exclusively over HTTPS, ensuring all data in transit is encrypted.
• Third-party services are selected based on their security practices and compliance with data protection standards.
• Access to personal data is limited to only what is necessary to fulfil the purposes described in this policy.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data, subject to legal obligations.
• Right to restrict processing: request that we limit how we use your data.
• Right to data portability: request a copy of your data in a structured, machine-readable format.
• Right to object: object to processing of your data based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us via the Contact page. We will respond to your request within 30 days.

10.1 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, please contact us via the Contact page.

11. International Data Transfers

The Site uses service providers that operate internationally. If you are visiting from outside the United States, your information may be transferred to, stored, or processed in the United States or other countries where those providers operate, subject to their applicable safeguards and data-protection obligations.

12. Children's Privacy

The Site is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child under 16, we will take steps to delete that information promptly.

13. External Links

The Site contains links to external websites and resources. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any external sites you visit.

14. Changes to This Policy

We may update this Privacy and Cookie Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

15. Contact

If you have any questions, concerns, or requests regarding this Privacy and Cookie Policy or how your data is handled, please contact us via the Contact page.