How your information is handled.
Last updated 28 October 2026
Who is responsible
This website is operated by Zulfiqar Ali under the name Zali Digital ("we"). For any privacy question, email contact@zalidigital.com.
What we collect
Only what you choose to send: when you use the contact form we receive your name, email address, and any company, website, budget range, topic and message you enter. If you email or call us, we receive the details in that message or call.
Like any web server, our hosting provider (Hostinger) keeps standard technical logs, such as IP address, browser type, the page requested and the time, for security and reliability. We do not use these logs to identify or profile visitors.
To block spam and repeated submissions, the contact form keeps a short-lived record keyed to a one-way, secret-keyed hash of your IP address. Your IP address itself is not stored by the form.
What we do not do
- We do not use advertising cookies. The only measurement tools on this site are Google Analytics and the OpenAI measurement pixel, both described below, and they set cookies only if you accept.
- We do not sell, rent or share your information for anyone else's marketing.
- We do not add you to a mailing list.
If we add any other measurement or analytics tool, this notice will be updated first and a consent choice will be shown where the law requires it.
Analytics and advertising measurement
Website analytics (Google Analytics). We use Google Analytics 4, provided by Google and loaded through Google Tag Manager, to understand how visitors find and use this site: which pages are viewed and in what order, the page you arrive on, where your visit comes from (for example a search engine, another website or an ad), your device type and browser, your approximate location (country and city, derived from your IP address; Google Analytics does not store IP addresses), clicks on our email, phone and strategy-call links, and whether the contact form was started, submitted and delivered, including the topic and budget range you chose. We never send your name, email address, phone number or message to Google.
If you click “Accept”, Google Analytics sets cookies to recognise repeat visits. If you decline or make no choice, Google Analytics sets no cookies and stores nothing on your device; Google may still receive cookieless pings (for example, that a page was viewed, without any identifier), which it uses only in aggregate. Google Analytics data is kept for 14 months. Purpose and legal basis: understanding and improving this website; for cookies, the legal basis is your consent, which you can withdraw at any time below. Google handles this data under its privacy policy. We have not connected Google Analytics to any advertising account.
Advertising measurement (ChatGPT Ads). We advertise on ChatGPT. To see whether those ads lead to enquiries, we use the OpenAI measurement pixel, provided by OpenAI, but only if you click “Accept” in the consent bar. If you decline or make no choice, the pixel is not loaded and nothing is sent to OpenAI.
If you accept, the pixel tells OpenAI when you view a page on this site, when you view our services or a case study, and when you send an enquiry through the contact form (only after our server confirms it was delivered). Like any web request, this also passes technical details such as your IP address and browser type, and the reference OpenAI adds to links when you arrive from a ChatGPT ad.
Automatic advanced matching: OpenAI’s pixel can detect contact details you type on this site, such as the email address in the contact form, and turn them in your browser into a one-way SHA-256 hash before anything is sent. We do not send your name, email address or phone number to OpenAI in readable form. The hashes are used only to match enquiries to ad interactions.
Purpose and legal basis: measuring how well our ads work and attributing enquiries to them. The legal basis is your consent. You can withdraw it at any time below; this stops measurement and removes the pixel’s tracking cookies from your browser. OpenAI handles this data under its privacy policy.
Your measurement choice is shown here when JavaScript is enabled. Change your choice
Why we use it
To reply to your enquiry and, if you choose to work with us, to discuss and deliver that work. The legal basis is your request and our legitimate interest in responding to it.
Where it is stored and for how long
Form submissions are not stored on the website. They are delivered by email to our business mailbox, hosted by Hostinger, and kept there.
- Enquiries that do not lead to work: deleted within 24 months of our last contact with you.
- Enquiries that lead to work: kept for as long as the working relationship lasts, and afterwards only as long as needed for accounting, tax or legal obligations.
- Spam-protection records (the hashed IP record described above): deleted automatically within 24 hours.
- Server logs: kept by Hostinger under its own retention policy.
Our hosting and email providers may process this information on servers outside your country. We rely on their contractual and security safeguards for those transfers.
Your rights
You can ask to see, correct or delete the information we hold about you, or object to how we use it, by emailing contact@zalidigital.com. You can also complain to your local data protection authority. You can withdraw your consent to analytics and advertising measurement at any time, as described above.
Cookies
This website sets no cookies of its own. If you accept measurement, Google Analytics sets two first-party cookies: _ga (a random visitor ID, kept for up to 2 years) and _ga_TY1FGC9H8Z (the current visit, kept for up to 2 years). If you decline, Google Analytics sets no cookies. If you accept advertising measurement, the OpenAI pixel sets up to three first-party cookies: __oaiq_consent (records that measurement is allowed, kept for 30 days), __oppref (the ChatGPT ad reference, set only when you arrive from a ChatGPT ad, kept for 30 days) and __obref (a random browser reference, kept for 365 days). If you decline, none of these cookies are set. If you withdraw consent after accepting, the pixel removes its tracking cookies and keeps only __oaiq_consent, set to “false” to record your choice. Your consent choice itself is saved in your browser’s local storage (zd_consent_v1, for 12 months) and contains only your choice and its date.
Links to other sites
This site links to LinkedIn and other external sites. Their own privacy policies apply once you leave this site.