Privacy Policy

Last updated 23 September 2026

Who we are

farzin.co is my personal site: it shows the work I build, and it also sells a small number of domain names. The data controller for the personal data described in this policy is the operator of farzin.co, contactable at hello@farzin.co.

This policy covers both roles. The first part applies to everyone who visits or gets in touch; the second applies only if you enquire about or buy a domain.

If you browse or contact me

  • Email or messages you send: used only to reply to you and keep a record of the conversation.
  • Analytics: aggregate page-view counts. No advertising or tracking cookies, and no profiling.
  • Cookies: essential only — for example remembering your light or dark theme choice.

Browsing the site requires no account and no personal data. Casual enquiries are kept only as long as needed to deal with them.

If you buy or enquire about a domain

Domain sales are handled by the operator of farzin.co as a sole-trader business based in the United Kingdom. For these transactions we collect:

  • Wire transfer requests: email, name, company, destination registrar.
  • Offers: email, optional name, offer amount, optional message.
  • Payment plan requests: email, intended use of domain, optional deposit and monthly budget.

Why we collect it

We process this data on the lawful basis of performance of a contract (to complete a sale you initiated) and legitimate interests (to evaluate offers, prevent fraud, and respond to enquiries). For payment plans, we additionally rely on your consent to the Payment Plan Agreement.

How we use it

  • Process your purchase, offer, or payment-plan enquiry.
  • Send you transactional emails (wire instructions, status updates, receipts).
  • Keep accounting records as required by UK tax law (up to 6 years).
  • Prevent and investigate fraudulent activity.

Who we share it with

We do not sell or rent your personal data. We share it only with the service providers required to operate the site: our database and email infrastructure provider (Lovable Cloud, which uses Supabase), and our bank for processing wire transfers. All providers are contractually bound to protect your data.

How long we keep it

  • Completed sales: 6 years (HMRC requirement).
  • Unaccepted offers and expired requests: 24 months, then deleted.
  • Email logs: 90 days for deliverability monitoring.

Your rights (UK GDPR)

You have the right to access, correct, delete, or port your personal data, and to object to or restrict processing. Email hello@farzin.co with any request. You may also complain to the UK Information Commissioner's Office (ico.org.uk).

Cookies

We use only essential first-party cookies (theme preference, session). No tracking or advertising cookies are set.

Changes

Material changes will be posted on this page with an updated revision date.