PRIVACY POLICY

Privacy Policy

1. Who I am

I'm Hatem. I run tomatikii, an Agentic OS consultancy for solo operators. I'm based in Tripoli with a UK registration. You can reach me at hatem@tomatikii.com.

This privacy policy covers the website at tomatikii.com. It does not cover any work I do under a separate engagement contract — that's governed by the terms in our written agreement.

2. What this site does and doesn't do

This site is informational. There's no signup, no purchase flow, no user accounts, no comments, no form. The only way to interact with me through this site is to click an email link and send me an email.

That means I don't collect names, emails, payment info, or anything else from you through this site itself. If you email me, I obviously have your email — see below.

3. What information is collected

Information you give me. If you email me at hatem@tomatikii.com, I receive whatever you put in that email. Usually that's your name, your email, and the substance of your message.

Information collected automatically. When you visit this site, my hosting provider (Vercel) records standard server logs: your IP address, the URL you requested, the time, your browser's user-agent string, and similar metadata. These exist for security and basic uptime monitoring. They aren't combined with anything else to identify you.

Cookies. This site sets no cookies of its own. If I ever add analytics, I'll choose a privacy-respecting option that doesn't require cookie banners (Plausible, Vercel Web Analytics, or similar) and update this policy.

4. How information is used

To respond to you when you email me. To keep the site running. That's it.

I don't use it for marketing. I don't add you to any list. I don't run retargeting ads. I don't sell or rent it.

5. Third parties involved

The site relies on two third parties:

Both Vercel and Google operate globally, which means data may be processed outside your country. Both publish their own data-protection terms; reviewing those is a good idea if you're sensitive about international transfers.

6. Data retention

I keep emails for as long as it makes sense to maintain the relationship — sometimes a few weeks, sometimes years. If you'd like me to delete an email thread, ask.

Server logs at Vercel rotate per their default retention policy.

7. Your rights

If you're in the UK or EU, GDPR gives you the right to:

To exercise any of these, email me. Most requests can be handled within a couple of days.

If you're elsewhere, similar rights may apply under your local law. The same email gets you the same response.

8. International transfers

As above: Vercel and Google operate globally. If you're in the EU/UK and worried about your data leaving the EEA, both providers have appropriate safeguards (standard contractual clauses, etc.) and you can review them on their respective sites.

9. Children

This site isn't directed at children under 16. I don't knowingly collect data from anyone under 16. If you think I have, email me and I'll remove it.

10. Changes to this policy

If this policy changes, I'll update the "Last updated" date at the top. Significant changes will be flagged on the page itself for at least 30 days.

11. Contact

Anything related to this policy, your data, or how the site works: