PRIVACY POLICY

Privacy Policy

Last updated: March 26, 2026

Who I am

This website (duy-doan.com) is operated by Duy Doan, a freelance SEO and content strategist based in Espoo, Finland.

If you have any questions about this privacy policy or how your data is handled, you can reach me at:

Email: doankhduy@gmail.com
Location: Espoo, Finland


What data I collect and why

Contact form submissions

When you fill out the contact form on this website, I collect your name, email address, phone number (if provided), and your message. I use this information solely to respond to your inquiry and discuss potential projects.

Legal basis (GDPR): Legitimate interest — responding to your request.

Email communication

If you contact me by email, I store our correspondence to provide the service you requested and to maintain a record of our communication.

Legal basis (GDPR): Legitimate interest and, where applicable, performance of a contract.

Analytics

This website uses analytics tools to understand how visitors use the site. This may include information such as pages visited, time spent on pages, referring website, browser type, and general geographic location. This data is collected in aggregate and does not personally identify you.

Legal basis (GDPR): Legitimate interest — understanding website performance and improving user experience.

Cookies

This website may use cookies for basic functionality and analytics. Cookies are small text files stored on your device when you visit a website.

Types of cookies used:

  • Essential cookies: Required for the website to function properly. These cannot be disabled.
  • Analytics cookies: Used to understand how visitors interact with the website. These are only set with your consent.

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling cookies may affect website functionality.

How I use your data

I use the data I collect to:

  • Respond to your inquiries and project requests
  • Provide the services you've requested
  • Improve the website and user experience
  • Understand how visitors find and use this website

I do not use your data for automated decision-making or profiling.

Who I share your data with

I do not sell, rent, or trade your personal information to third parties.

Your data may be processed by the following third-party services that help me operate this website:

  • Webflow (website hosting) — Privacy policy: webflow.com/legal/privacy
  • Google Analytics (website analytics) — Privacy policy: policies.google.com/privacy
  • Calendly (appointment scheduling) — Privacy policy: calendly.com/privacy

These providers act as data processors and are required to handle your data in accordance with GDPR.

Where your data is stored

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, through the third-party services listed above. These providers use appropriate safeguards such as Standard Contractual Clauses to protect your data in accordance with GDPR requirements.

How long I keep your data

  • Contact form submissions and emails: Kept for as long as necessary to respond to your inquiry and for up to 2 years afterward for reference, unless you request deletion sooner.
  • Analytics data: Retained in aggregate form for up to 26 months, depending on the analytics provider's settings.
  • Project-related data: Kept for the duration of the project and for up to 5 years afterward for accounting and legal purposes as required by Finnish law.

Your rights under GDPR

As a resident of the European Union, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data I hold about you.
  • Right to rectification: You can ask me to correct any inaccurate or incomplete data.
  • Right to erasure: You can ask me to delete your personal data, subject to legal obligations.
  • Right to restrict processing: You can ask me to limit how I use your data.
  • Right to data portability: You can request your data in a structured, commonly used format.
  • Right to object: You can object to my processing of your data based on legitimate interest.
  • Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact me at doankhduy@gmail.com I will respond within 30 days.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuojavaltuutettu):

Office of the Data Protection OmbudsmanWebsite: tietosuoja.fi
Email: tietosuoja@om.fi
Phone: +358 29 566 6700

Children's privacy

This website is not directed at individuals under the age of 16. I do not knowingly collect personal data from children. If you believe I have collected data from a minor, please contact me and I will delete it promptly.

Changes to this policy

I may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. I encourage you to review this page periodically.

Contact

If you have any questions about this privacy policy, please contact me:

Duy DoanEmail: doankhduy@gmail.com
Location: Espoo, Finland

Location
Espoo, Finland
Phone Number
+ 358 45 237 2291
Email Address
doankhduy@gmail.com