Skip to content

Privacy Policy

Last updated: June 20, 2026

Introduction

Welcome to ijalfauzi.com. This Privacy Policy explains how I (Ijal Fauzi) collect, use, and protect your information when you visit my personal website. Please read it alongside my Terms of Service.

Contact Information

For any questions about this Privacy Policy, please contact me at:

Information I Collect

Through my forms

When you start a project inquiry (on my Hire Me page or a project page), I collect your name, email address, business or company name, project type, project details, timeline, and budget, so I can understand the work before replying.

When you request my CV (on my CV page), I collect your name, email address, phone number, company, occupation, the reason you’re reaching out, and any optional LinkedIn link or message you add, so I can send you the CV and follow up.

Each form has a consent checkbox: by ticking it you agree to this Privacy Policy and to my contacting you about your enquiry. When you submit, your details are emailed to me and saved in the website’s database (via the Fluent Forms plugin) so I have a record. The forms are protected by Cloudflare Turnstile, and I use what you send only to respond to you.

Comments

When you leave a comment on one of my blog posts, I collect:

  • Name
  • Email address
  • Comment content
  • IP address (collected automatically)
  • Browser user agent string (collected automatically)

Automatically Collected Information

Like most websites, mine collects standard log data, including:

  • IP addresses
  • Browser type
  • Pages visited
  • Time and date of visits
  • Referring websites

How I Use Your Information

I use the information I collect to:

  • Respond to your inquiries and messages
  • Follow up about a project or service you asked about
  • Keep my website working well and improve it over time
  • Monitor for and prevent security issues and spam
  • Understand general traffic patterns through Google Analytics
  • Measure how my pages perform and, if I run ads, how well they bring genuine inquiries (a successful form submission is recorded as a “lead” event)
  • Manage and moderate comments

I may reply by email or, if you share the details with me, through a messaging app such as WhatsApp or Telegram. I do not share your contact details with third parties, use them for marketing, or add you to any broadcast list without your explicit consent.

Third-Party Services

Google Analytics & Conversion Tracking

I use Google Analytics (and, when configured, Google Tag Manager) to understand how visitors use my website and to measure how well my pages and any advertising perform. This may collect:

  • Pages visited
  • Time spent on the site
  • Technical information about your browser and device
  • IP address

When you successfully submit one of my forms, a “lead” conversion event is recorded so I can see which pages bring real inquiries. When an order is paid, a “purchase” event is recorded with the order number, amount, currency, and which package was bought. Neither event includes your name, email, address, or payment details.

Analytics and your choices. I want to be straightforward about how this works, because it matters: analytics loads by default — I do not ask you to opt in first. I rely on my legitimate interest in knowing how the site performs, not on your consent, so please do not read the presence of analytics as something you agreed to.

What I do instead of an opt-in banner:

  • You can turn analytics off here, and back on again. The control below sets a preference on this browser. While it is off, no analytics scripts load, and any order you place from then on is marked not to be measured. An order placed before you switched it off keeps the setting it had at the time, so its purchase measurement may still be sent when that payment completes — email me if you want that stopped.
  • I honour Do Not Track and Global Privacy Control. If your browser sends either signal, the analytics scripts are not loaded at all — nothing is sent to Google for your visit.
  • You can block or clear these cookies through your browser settings, or use Google’s own opt-out browser add-on.
  • Analytics is never used to make decisions about you individually — only to see how pages perform in aggregate.

Analytics is currently on for this browser.

Because that preference lives in a cookie on the browser you are using, it applies to that browser only and is lost if you clear your cookies. Turning analytics off stops future collection; it does not erase what was collected before. To ask about data already held, email me.

I have written down my reasoning for relying on legitimate interest rather than consent, including how I weighed it against your rights. If you would like me to explain it, just ask.

WordPress Comments

I use the native WordPress commenting system. Comment data is stored in my website’s database.

Cloudflare Turnstile

My forms use Cloudflare Turnstile, a privacy-focused alternative to CAPTCHA, to tell humans and bots apart. It looks at signals from your browser to verify your submission and may set a cookie for that purpose. It is designed not to track you across websites.

Embedded Content

Some posts embed content from other websites (for example videos or social posts). Embedded content behaves as if you visited that other site directly, so it may:

  • Collect data about you
  • Use cookies
  • Track your interaction with that embedded content

My website uses essential cookies for basic functionality, and Google Analytics sets its own cookies to measure traffic and conversions. My forms’ spam protection (Cloudflare Turnstile) may set a cookie to verify you’re not a bot. You can control or clear cookies through your browser settings. Fonts are served from my own website rather than a third-party font service, so simply loading a page does not call out to an external font provider.

Data Security

I take reasonable measures to protect your information, and I keep contact details only as long as I need them to handle your inquiry. That said, no method of transmission over the internet is completely secure.

International Data Processing

My website is primarily intended for Indonesian visitors but is accessible globally. I am based in Indonesia, and Indonesian law governs how I handle your data — but you should know where it physically sits.

The website is hosted in Singapore. The server is located there, so the website’s own records — orders, payment records, acceptance records, comments, and form submissions — are stored there rather than in Indonesia.

Other service providers described above also process data outside Indonesia as part of providing their service: PayPal (payments), Google (analytics), Cloudflare (site delivery and form spam protection), and my email delivery provider.

Your Rights

In line with Indonesia’s Personal Data Protection Law (UU No. 27 of 2022), you have the right to:

  • Request access to the personal data I hold about you
  • Request correction of your personal data
  • Request deletion of your comments and contact information
  • Turn analytics off using the control in the Google Analytics section above, or block cookies in your browser settings

To exercise any of these rights, just email me at [email protected].

Changes to This Policy

I may update this Privacy Policy from time to time. Any changes will be posted on this page with a new revision date.

Governing Law

This Privacy Policy is governed by the laws of Indonesia.