Effective date: 13 October 2026
Introduction
This Privacy Policy explains how I, Abdolnabi Zameni, an individual based in Australia, handle personal information on my website https://zameni.us (including blog.zameni.us) and in my private Google app “Server Backups”.
I follow the Australian Privacy Act 1988 and the Australian Privacy Principles. If you are in the European Union, you also have rights under the GDPR, which are covered below.
I do not sell personal data.
Information we collect
Information you give me. The site has these forms:
- Request a service: full name, work email, company or organisation, service interest, project brief, timeline, preferred contact method, phone number and LinkedIn profile (optional).
- Contact me: name, email, your request and comments.
- WordPress support request: name, email, the plugin and your request.
- Cybersecurity audit checklist: name, email, your yes/no answers to 10 security questions, and how I can help.
Comments. On my blog (blog.zameni.us) and some portfolio pages, you can leave a comment. WordPress stores your name, email, website (if given), comment, IP address and browser details. Blog comments are checked for spam by Akismet, a service run by Automattic.
Clients. If I work for you, I keep your name, email, address and invoice details, and may create a client login for you, to bill you.
Server logs. Like most websites, the server and Cloudflare automatically record technical details of each visit: your IP address, browser type, device, the pages you visit, and the date and time.
Cookies. See the Cookies section below.
How we use it
- To reply to your enquiry or service request and provide the service you asked for.
- To display and moderate comments.
- To keep the site secure, prevent spam and abuse, and fix technical problems.
- To send invoices to clients.
I do not use your information for advertising and I do not sell or rent it to anyone.
Cookies
Cookies are small files your browser stores. This site uses:
- Login cookies for administrators only. These are WordPress and Cloudflare Access cookies. Ordinary visitors don’t get them.
- Cloudflare security cookies. Cloudflare may set these, mainly when it needs to check whether traffic is from a bot.
- Firewall cookies. The Wordfence security plugin may set these.
This site uses no analytics or advertising cookies.
- Embedded content. Pages may include embedded content, such as LinkedIn posts or videos. The site that provides it may set its own cookies and collect data as if you visited that site directly.
You can block or delete cookies in your browser settings. Some site features may not work without them.
Third-party services
- Cloudflare. The site is served through Cloudflare for content delivery and security. Cloudflare processes visitor IP addresses and request data to do this. See the Cloudflare Privacy Policy.
- Web hosting. The site runs on a Hetzner server, with Cloudflare in front of it. Hetzner stores the site and its database.
- Akismet (Automattic). Checks blog comments for spam. See the Automattic Privacy Policy.
- Gravity Forms. This WordPress plugin stores form entries in the site’s own database.
- Wordfence. A security plugin that logs IP addresses and traffic to block attacks.
- WP Mail SMTP. Sends the site’s emails, such as form notifications, from [email protected], and may keep a log of them.
- Job platforms. I also take work through Airtasker, hipages and Taskoria. Details you share there, and payments made there, are handled under those platforms’ own privacy policies.
- Easy Invoice. Stores client names, emails and invoices in the site’s database.
Some of these providers may store data outside Australia. Where that happens, I rely on their published privacy and security commitments.
Google API data (Server Backups app)
“Server Backups” is a private, single-user tool. I use it only to upload backup archives of my own servers to my own Google Drive, and to delete old backup archives from that Drive folder.
- It requests the Google Drive scope (
https://www.googleapis.com/auth/drive) only to create, list and delete those backup files. - It does not read, analyse, share, sell or transfer any other Google user data. There is no advertising and no third-party access.
- Login tokens are stored only on my own server.
- Access can be revoked at any time at Google Account permissions.
Server Backups’ use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data retention
- Contact and service request entries are kept for 24 months and then deleted.
- Client and invoice records are kept for as long as Australian tax law requires (generally 5 years).
- Server, Wordfence and Cloudflare logs are kept for up to 90 days.
- Server Backups tokens are kept until I revoke them. Backup archives are deleted on my own rotation schedule.
Security
I use reasonable measures to protect personal information. These include HTTPS, Cloudflare protection, software updates and restricted admin access. No method of storage or transfer online is 100% secure, but I work to keep your information safe.
Your rights
You can ask me to:
- Access the personal information I hold about you.
- Correct it if it is wrong.
- Delete it.
If you are in the EU, you can also object to or restrict processing, ask for a copy of your data in a portable format, and complain to your local data protection authority. In Australia, you can complain to the Office of the Australian Information Commissioner.
To make a request, email [email protected]. I will respond within 30 days.
Children’s privacy
This site is not aimed at children under 16, and I do not knowingly collect their personal information. If you believe a child has sent me information, contact me and I will delete it.
Changes to this policy
I may update this policy from time to time. The new version will be posted on this page with a new effective date.
Contact
Abdolnabi Zameni Email: [email protected] Website: https://zameni.us
