Privacy.

Last updated. August 8, 2026

Who is responsible

This website is operated by Mehreen Arshi, a writer and reader based in Canberra, Australia. Your privacy matters. This policy explains what information this site collects, why, and the choices you have. It applies to everyone who visits the site or sends a message from it.

A plain-language summary

• This site does not sell your information to anyone, ever.
• If you send a message through the contact form, only the details you provide are kept, and only so Mehreen can reply.
• If you order a book, payments are processed entirely by Stripe. Card details never pass through this site.
• Like most websites, this one uses Google Analytics to understand, in aggregate, which pages are read.

Information this site collects

Contact messages. If you use the contact form, the name, email address, and message you submit are sent to this site’s hosting provider (Netlify) and delivered to Mehreen’s inbox. They are used only to reply to you. Contact details are kept for the ongoing conversation; the message itself may be kept while the correspondence is active.

Book orders. If you buy a copy of I carry your heart through the book page, the checkout is completed on Stripe, our payment provider. Stripe collects your name, email address, billing and shipping address, and payment details to process the payment and deliver your copy. This site itself does not receive or store your card details, and it only receives the information needed to confirm your order. Your name and shipping address are shared with Australia Post solely to deliver your copy.

Analytics. This site uses Google Analytics to measure traffic and understand how visitors use the site. Google Analytics uses cookies and similar technologies to record pages visited, approximate location, device type, and browsing behaviour, reported in aggregate. This information helps Mehreen understand what writing to share and what to improve. You can opt out of Google Analytics tracking with the Google Analytics opt-out browser add-on.

Server logs. Netlify, the hosting provider, records standard server logs (such as IP addresses and requested pages) as part of operating the site and securing it against abuse.

How information is used

Information collected is used for these purposes only:

• to reply to messages you send,
• to process and deliver book orders,
• to understand site traffic in aggregate,
• to keep the site secure and working correctly.

This site does not sell, rent, or trade personal information. It does not display advertising.

Legal bases and Australian law

As an Australian website, this site is operated in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where the GDPR applies to you, the legal bases relied on are:

• Consent. For analytics cookies and for sending a contact message.
• Contract. For processing a book order.
• Legitimate interest. For operating and securing the website.

Who information is shared with

Information is shared only with the service providers required to run the site:

• Netlify (hosting and contact-form delivery),
• Google LLC (analytics),
• Stripe, Inc. (payment processing),
• Australia Post (delivery of orders).

Each of these providers processes information under its own privacy policy and data-protection commitments. Some of these providers store data on servers outside Australia; Stripe and Google operate in jurisdictions with recognised privacy safeguards.

Retention

• Contact messages and correspondence are kept only while the conversation is active.
• Order records are kept as long as needed for tax, accounting, and delivery purposes.
• Analytics data is retained per Google’s retention settings (currently 14 months).
• Server logs are kept on a rolling basis and deleted regularly.

Your rights

You may ask at any time for access to the personal information this site holds about you, or ask to have it corrected or deleted. To make a request, use the contact form on the contact page and mark your message accordingly. Requests will be answered within a reasonable time and, where the law requires, within 30 days.

You may also:

• withdraw consent to analytics cookies at any time by using the opt-out tools above or blocking cookies in your browser,
• request erasure of personal information where it is no longer needed,
• complain to your local data-protection authority if you believe your information has been mishandled.

Cookies

This site uses cookies only for analytics (Google Analytics) and for the operation of the site itself (such as remembering the day/night theme choice). It does not use advertising or tracking cookies from third parties.

Third-party links

The site links to external services, including Substack. Once you leave this site, those services have their own privacy policies, which this policy does not cover.

Changes to this policy

If this policy changes, the updated version will be published on this page with a new revision date. Material changes will be noted prominently.

Questions

If you have any question about this policy, or about information this site holds, please get in touch through the contact page.