Privacy Policy

1. Introduction

Welcome to www.gmrafi.com.bd ("Website"), the personal academic portfolio of Md Golam Mubasshir Rafi. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. This policy complies with GDPR (General Data Protection Regulation) and applicable data protection laws.

2. Information We Collect

2.1 Automatically Collected Information

When you visit our website, we automatically collect certain information through Google Analytics:

• IP address (anonymized)
• Browser type and version
• Device information (desktop/mobile)
• Pages visited and time spent
• Referring website
• Geographic location (country/city level)

2.2 Cookies and Tracking Technologies

We use the following cookies:

• Google Analytics (_ga, _gid, _gat): Analytics cookies to understand website usage
• Cloudflare (__cflb, __cf_bm): Security and performance cookies

2.3 What We DO NOT Collect

Important: This website does NOT collect:

• ❌ Email addresses or contact information (no forms on site)
• ❌ Personal identification data
• ❌ Payment or financial information
• ❌ Social security numbers or government IDs
• ❌ Login credentials (no user accounts)

If you contact us via email (rafi@gmrafi.com.bd or golammubasshirrafi@gmail.com), your email is received directly in our email inbox (not stored on our servers or database).

3. How We Use Your Information

We use collected information for:

• Understanding website traffic and user behavior
• Improving website content and user experience
• Detecting and preventing security threats
• Analyzing geographic distribution of visitors

4. Legal Basis for Processing (GDPR)

Under GDPR, our legal basis for processing your data is:

• Legitimate Interest: Analytics to improve website performance
• Consent: By using this website, you consent to cookie usage as described

5. Third-Party Services

5.1 Google Analytics

We use Google Analytics (Measurement ID: G-2EW8XBDL67) to analyze website traffic. Google Analytics uses cookies and may transfer data to Google servers. IP addresses are anonymized. Google Privacy Policy

5.2 Cloudflare CDN

Our website uses Cloudflare CDN for security, performance, and DDoS protection. Cloudflare may collect technical data (IP addresses, browser information) for security purposes. Cloudflare Privacy Policy

5.3 External Links

Our website contains links to external platforms including:

• Research Profiles: ORCID, Google Scholar, ResearchGate, Academia.edu, Web of Science
• Social Media: LinkedIn, GitHub, Twitter, Facebook, Instagram
• Content Platforms: Medium.com (blog articles)
• Academic Institutions: BRAC University, AIUB, Army IBA
• Project Demos: Vercel, GitHub Pages (external project hosting)

These external sites have their own privacy policies. We are not responsible for their data practices. When you click an external link, you leave our website and are subject to their terms.

5.4 DMCA Protection Badge

We display a DMCA.com protection badge for content protection. The badge loads from DMCA.com servers but does NOT collect or transmit your personal information. DMCA Privacy Policy

6. Data Retention

- Google Analytics: Data is retained for 26 months (Google's default setting)
- Cloudflare Logs: Security logs are retained for 24 hours
- Our Servers: We do NOT store personal data on our servers (static website hosted on GitHub Pages)
- Email Communications: If you email us, your email is stored in our personal Gmail account (subject to Google's retention policies)

7. Your Rights Under GDPR

If you are an EU/EEA resident, you have the following rights:

• Right to Access: Request a copy of your data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to data processing
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at: rafi@gmrafi.com.bd

8. How to Opt-Out

You can opt-out of tracking by:

• Installing Google Analytics Opt-out Browser Add-on
• Enabling "Do Not Track" in your browser settings
• Clearing cookies in your browser
• Using privacy-focused browsers (Brave, Firefox with tracking protection)

9. Data Security

We implement security measures to protect your data:

• SSL/TLS encryption (HTTPS) for all connections
• Cloudflare DDoS protection and firewall
• No storage of personal data on our servers
• Regular security updates

10. Children's Privacy

This website is not directed to individuals under 13 years of age. We do not knowingly collect personal information from children.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the EU/EEA (USA - Google servers). We ensure adequate protection through Google's GDPR compliance and standard contractual clauses.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the website constitutes acceptance of changes.

13. Contact Information

Data Controller: Md Golam Mubasshir Rafi
Email: rafi@gmrafi.com.bd
Alternative Email: golammubasshirrafi@gmail.com
Institution: Army Institute of Business Administration, Sylhet, Bangladesh
Website: www.gmrafi.com.bd

For GDPR-related inquiries or to exercise your rights, please email us with "GDPR Request" in the subject line.

14. Supervisory Authority

If you are an EU resident and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority.