Privacy

Privacy notice

Who I am, what I keep, why I keep it, and how to get it deleted.

The short version: this website has no forms and sets no cookies. If I emailed you about white-label design, I took your work address from your agency's own website. Reply "no" and you will not hear from me again.

1. Who I am

I'm Annanda Islam, a product and brand designer in Dhaka, Bangladesh. I run my freelance work on my own, so I am the person responsible for the data on this page. Write to me at [email protected], or reply to any email I sent you.

2. If I emailed you: where your details came from

This covers the emails I send to agencies about white-label design, from October 2026. I take your email address only from your agency's own website. Your name and job title come from that website, from business directories such as Clutch, from job ads, or from LinkedIn. I find agencies through directories and public job ads. What I keep:

  • your name, job title and work email
  • your agency's name and website
  • the page where your address was published, the date I checked it, and a screenshot of that page
  • my notes on whether your agency looks like a fit and, if you were hiring a designer, the link to that job ad
  • the emails between us, the dates I wrote, whether you replied, and whether I sent you a LinkedIn invite

3. Why I use it

Legitimate interest: offering design services that are relevant to your role at a business that publishes its contact address. I send at most three emails over about ten days. The sequence stops when you reply. After that I write only to continue our conversation, and never again if you say no.

4. Who else handles it

I do not sell or rent your details, and no one else uses them to contact you. A few service providers store or process them for me: Google (my email and a private Google Sheets spreadsheet) and the AI tools I use to research agencies and draft emails. The screenshots stay on my own computer. I work from Bangladesh, so your details are handled outside the UK and EU, on my computer and on those providers' servers, including in the United States.

5. How long I keep it

  • If you do not reply: when the sequence ends I delete your name, job title and our emails. I keep a short record (your work email, your agency's domain, the dates I wrote, and the page where I found the address, with its screenshot) for 3 years. That way I never email you twice and can show where your address came from. Then I delete it.
  • If you replied: I keep your details for up to 12 months after our last email. If you asked me to check back later, I keep them until then.
  • If you ask me to stop: I keep only your email address and your agency's domain on a do-not-contact list. That is how I make sure you never hear from me again.
  • If we work together: I keep our emails as normal business records.

If you ask me to delete your details, I do it within 5 days. I keep only the do-not-contact entry and the short record of where I found your address, in case I ever have to show it.

6. Your rights

You can:

  • object to these emails, and I stop
  • ask what I hold about you, and get a copy
  • ask me to correct it or delete it
  • ask me to restrict how I use it

Reply "no" to any email, or write to [email protected]. I act on it within 5 days. If you think I got something wrong, you can also complain to the data protection authority where you live.

7. This website

The site is a set of plain pages. It has no forms, no accounts, no comments and no ads, and it sets no cookies. The email links open your own mail app. The legal basis for what follows is my legitimate interest in running and securing the site. Here is everything that touches your data when you visit:

  • Hosting. The site runs on Cloudflare Pages. Like any web host, Cloudflare receives your IP address and browser details when your browser asks for a page, so it can deliver the page and protect the site from attacks. See Cloudflare's privacy policy.
  • Visitor counts. Cloudflare Web Analytics gives me totals such as page views, referring sites, countries, device types and page speed. It sets no cookies and does not follow you from site to site.
  • Fonts. The fonts load from Google Fonts. Your browser fetches them from Google's servers, so Google receives your IP address and browser details. See Google's privacy policy.
  • Animation setting. If you press the button that pauses the animations, your browser saves that choice on your device (in local storage). It never reaches me.
  • Links out. Links to LinkedIn, GitHub, Behance, Figma and Patreon take you to those sites, which have their own privacy policies. Nothing from them loads on this site.

8. Changes

If anything here changes, I update this page and the date at the top.