Legal
Privacy Policy
Last updated: 26 April 2026
This Privacy Policy explains what personal information yehonatandev.com (operated by Yehonatan Saadia) collects, why, how long it's kept, and the rights you have under GDPR (European Union, EEA and UK) and the CCPA / CPRA (California, USA).
Who is the data controller
Yehonatan Saadia, an individual freelancer. Contact: yehonatan[at]yehonatandev.com No separate legal entity is registered for this site.
What information we collect
From the public site: • Contact form submissions - your name, email, optional company, and the message you typed. • Anonymous analytics events (only if you opt in) - pages viewed, approximate location at country level, device class, referrer. From CRM activity (private admin panel; outbound only): • Publicly available business contact details of prospects (name, business email, phone, source URL, public listing data) used for legitimate-interest B2B outreach. Anyone who replies asking to be removed, or clicks an unsubscribe link, is suppressed permanently.
Legal basis for processing
Under GDPR Art. 6(1): • Contact form - performance of a contract / pre-contractual measures (Art. 6(1)(b)). • Analytics - your consent (Art. 6(1)(a)). You can withdraw it any time from the footer. • B2B outreach - legitimate interests of a small freelance service (Art. 6(1)(f)), balanced against your right to object, with a one-click unsubscribe link in every email and instant suppression when triggered.
Cookies and analytics
We use Google Analytics 4 only after you explicitly accept analytics cookies. By default, Google's Consent Mode v2 keeps every analytics and advertising flag set to 'denied' until you change it. The full list of cookies, their names, and their lifetimes is in our Cookie Policy.
How long we keep data
Contact form messages - 12 months after our last reply, then deleted. CRM lead records - until the recipient unsubscribes or 24 months of inactivity, whichever comes first. Analytics raw events - 14 months in Google Analytics, then auto-purged. Admin login tokens - session-storage only; cleared on logout.
Your rights under GDPR (EU / EEA / UK)
You have the right to: • Access - request a copy of your data. • Rectification - correct inaccurate data. • Erasure - request deletion ("right to be forgotten"). • Portability - receive your data in a machine-readable format. • Restriction - limit how we process it. • Objection - object to legitimate-interest processing (B2B outreach), at which point we stop. • Withdraw consent - for analytics, anytime via "Manage preferences". • Lodge a complaint with your supervisory authority. To exercise any right, email yehonatan[at]yehonatandev.com. We respond within 30 days.
Your rights under CCPA / CPRA (California)
California residents have the right to: • Know - what personal information we have collected, used, or disclosed. • Delete - request deletion of personal information. • Correct - request correction of inaccurate information. • Opt out - of any sale or sharing of personal information. We do not sell or share personal information for cross-context behavioural advertising. The "Your Privacy Choices" link in the footer lets you re-confirm this preference. • Non-discrimination - exercising any of these rights does not change the service you receive. We do not knowingly process the personal information of consumers under 16 without affirmative authorisation.
International transfers
Some of our processors are based outside the EU/EEA: Google Analytics (United States), Gmail SMTP for outbound mail (United States), MongoDB Atlas (cluster region of your data location). These transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses where applicable.
Children
This site is aimed at adult business decision-makers and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a minor has submitted information, contact us and we will delete it.
Contacting us / exercising your rights
Email: yehonatan[at]yehonatandev.com Response time: within 30 days for GDPR / CCPA requests; within 24 business hours for general enquiries.
Changes to this policy
When this policy changes materially we'll bump the "Last updated" date at the top and (if you previously consented to analytics) prompt you again so you can re-confirm. Older versions are available on request.
You can change your cookie consent at any time, or learn exactly which cookies we use.
Cookie Policy ג†’Disclaimer: this policy is a freelancer-portfolio template. We strongly recommend a qualified attorney reviews it before relying on it for production legal compliance.