Privacy

Who we are

21 Portfolios is operated by Yahya Deeni, a freelance digital designer based in Scotland. Contact: yahyadeeni1@gmail.com

What we collect

Only what you choose to give us. From anyone who gets in touch:

• Your name and email address, submitted through the project form
• Your current website address, if you provide one
• Project details and briefs you submit
• Your phone number, only if you contact us by phone

And from clients, once a project has started:

• The project record behind your portal: your name and email, the project, the agreed fee and dates, where the build is up to, and receipts issued
• Which steps you have sent from the portal and when, and anything typed into a portal form but not yet sent, so you can finish it on another device
• What you send through the portal, including your signature on the agreement, which comes to us by email
• If you take the Partner plan, whether it is running, its dates, and the reference numbers Stripe gives it

How we collect it

When you send the project form, it goes to a small program running on this site's host, which emails it to us and nothing else. The form itself is not stored anywhere: no record is kept beyond the email. The host may log that a request happened, as any web server does, and those logs are kept by the host on our behalf for a short period.

If that fails, the page offers to hand the text to your own email app or clipboard instead, so you can send it yourself. Nothing is transmitted anywhere in that case until you send it.

The client portal is different, because it has to remember your project between visits. Its record is kept in a database hosted in London. Only this site's own server can read it, with a key held in the host's encrypted settings; nothing in a web page can reach it. Each step you send is also emailed to us.

Plan payments are taken by Stripe, on Stripe's own page. Your card details go to Stripe and never reach this site or us.

Who else is involved

This site is hosted by Vercel, who serve the pages, run the code that sends your message, and store the site's own images. Email is delivered through Google, because our inbox is a Gmail account. The portal's database is run by Supabase, in London. Card payments for the Partner plan are handled by Stripe, under its own privacy policy. Each of them handles your information only to do that job for us. Nothing is shared with anyone else, and nothing is used for advertising or profiling.

Cookies and tracking

We do not use cookies, analytics, advertising or tracking of any kind. A few things are kept in your own browser so the site works the way you left it, and none of them identify you or leave your device:

• That you have seen the intro animation, cleared when you close the tab
• Your choice, if you press the button that pauses the site's motion
• In the portal, which steps you have done, as a backup to the copy kept with your project
• While you are on Stripe's payment page, your portal code, in that tab only, so the portal can open itself when you come back. It is removed as soon as you do

Because these only do what you asked the site to do, there is nothing to accept or reject, and so no cookie banner. Stripe's payment pages set cookies of their own to prevent fraud, under Stripe's policy. The Abinci case study shows Abinci's live site in a frame, and that site asks for its own consent.

Your rights

You can ask us to access, correct or delete any personal data we hold at any time: the relevant emails, and for clients, the project record behind the portal. Records of payments and receipts are the one exception, because tax law requires us to keep them. Email yahyadeeni1@gmail.com and we will action your request within thirty days.

Data retention

We keep project related emails and the portal's record of a project only for the length of our working relationship, including any plan. Once it ends we delete them within twelve months, unless you ask us to do it sooner. Records of payments and receipts are kept for as long as tax law requires, which is around six years.

Changes

We may update this policy from time to time. Any changes appear on this page with a new date.