Notices for this website.

This page also includes statements about related notices, such as, cookies and fair use for dalyakandil.me and related works, hosted and otherwise.

This page contains a WordPress auto-generated privacy policy, which includes JetPack specifications, for the hosting site represented by Kandil Consulting LLC and to the extent as defined by client and organizational agreements for existing works being hosted online (and elsewhere) by Dalya Kandil of Kandil Consulting LLC, heretofore referred to as ‘The website’. It also includes a brief statement about cookies, fair-use and other related copyright specifications. Additional information has been be posted on how your information is being accepted, redistributed and protected.

About Kandil Consulting LLC

Kandil Consulting LLC, which has also operated, and has been known as using DBA, Krafted For People, and also, operated design websites online such as: kcllc.design, dalyakandil.design and dalyakandil.me, is a sole proprietorship which operates strictly online.

Kandil Consulting LLC has been in operation since 2014. It was established by Dalya Kandil in Norfolk, VA, where she worked for both corporate, small business clients and individuals. Most of the primary operations of her company have been out of Norfolk, VA, USA until almost all of the primary, full-time business operations ceased in late 2018, due to unforeseen circumstances. Since then it has operated only part-time and strictly online.

Information About Our Current Operations

Kandil Consulting LLC is currently only operating online as a freelance design entity and producing mostly pro-bono or per diem work with little or no compensation. The website’s servers are being hosted on a basic public server and is mostly used to disseminate information and credits on past projects which were mostly acquired without the help of third-party recruiters.

The site also provides a WP-Form contact feature and lists several email addresses which can be used to contact the website administrator and sole proprietor, Dalya Kandil.

The website does not guarantee the safety of any business transactions being conducted through the current web hosting environment or physical address which is currently in the Norfolk, VA.

You can make contact by using the email address [email protected] with any additional questions or concerns.

Website Fair Use and Copyright Statements

Work that is hosted or included by this website or any affiliated hosting entities.

All original works represented by Kandil Consulting LLC Website, which are being hosted on the web, linked to, or represented by in print, audio and other digital formats are subjected to rights and restrictions as denoted and/or legally prescribed by creative and technical agreements with Kandil Consulting LLC and other hosting entities.

Copyright and Authorship Information

Most of the original hosted works have been watermarked and contain author, client and other related copyright information. This metadata can be found in both the file and image metadata.

Please make sure to read the my website privacy policy before using this website or any related website or printed work.

What personal data we collect and why we collect it

The website only collects information that is specifically submitted to the website through site visitation records, WP-Forms contact submissions and MailChimp mailing list signup form submissions. Any other technical data, such as cookies, location, technical or demographic information is collected through the standard WordPress recommended plugins and services, such as, but not limited to: JetPack, Askimet, Wp-Forms, Google Administration Panel, Wordpress.com, MailChimp.

By default WordPress and Kandil Consulting LLC Website does not share any personal data with anyone outside of stated and active agreements.

Personally Identifying Information

By default WordPress does not collect any personal data about visitors, and only collects the data shown on the User Profile screen from registered users. We do not register users outside of the site administrator and sole proprietor. However, some of the officially endorsed plugins may collect personal data, which we are not responsible for. Contact the WordPress administrators at Wordpress.com to find out more information on how JetPack, WP-Forms, MailChimp, Google Administration Panel, Easy-WP NameCheap, JetPack, Askimet and other similar services collect and use PII.

Privacy and Cookies

The website uses cookies. If you use the website, you agree to use of cookies as related to Wordpress.com, MailChimp and other related and/or approved plugins or services.

Additional Statements on Cookies

Cookie agreements and acknowledgements are provided to the user by the standard WordPress cookie widget. It is up to the user to read and agree to their use, in so far as using this website, officially affiliated website, or any of the associated plugins or transactional forms that are being hosted. The website only allows the cookies which Wordpress.com, or it’s affiliated and sponsored plug-ins, installs by default.

Activity Log

If you were a registered user, the website would save your content activity like create/update/delete posts and comments. The website does not currently host any commenting or sharing ability, other than allowing users to print media from or share urls to listed social media channels. The urls are not guaranteed beyond the life and scope of the current hosting service at NameCheap.

JetPack, Askimet

We collect information about visitors who comment on Sites that use our Askimet anti-spam service. The information we collect depends on how the User sets up JetPack, Askimet for the Site, but typically includes the commenter’s IP address, user agent, referrer, and Site URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself).

Site Hosting and Name Servers

We currently use the Easy-WP NameCheap website hosting service which provides basic security and url hosting information. The website cannot guarantee the site health beyond what it provided by the hosting service and the web monitoring channels. DNS is provided by the third-party resolution service, Dynadot, and is subject their standard operating authority.

Comments

The website will collect standard data which is requested by WordPress. The website does not currently support external user registration or external user comments.

Media

Media files cannot be uploaded except by the website administrators. All media hosted on the website is subjected to the website privacy policy. Terms of use, fair-use and conditions of user privacy while using the website are subject to change at any time by the website administrator and will be mostly based on legal changes made by the Clients, the Website hosting service, or any third party channels or services in use by or contracted through Kandil Consulting LLC.

Contact forms

By default, WordPress does not include a contact form. The website will keep the information from contact form until asked to be removed by the owner or legal representative of the information. The website does not use the information submitted through these channels for any marketing purposes beyond what standard WP-Forms, MailChimp or Google administration policies dictate. For more information, please contact WordPress, WP-Forms, MailChimp or Google administration policies for how their organizations use email and contact form submission data that is channeled through their organizations’ services.

Industry regulatory disclosure requirements

If you are a member of a regulated industry, or if you are subject to additional privacy laws, you may be required to disclose that information before contacting or discussing work with any representative or affiliate of Kandil Consulting LLC or the sole proprietor, Dalya Kandil.

What rights you have over your data

You have the right to be removed from our mailing list. Please contact the site administrator at [email protected] for information about deleting PII from the website newsletter list, signup form hosting entity, or any other mailing lists.

JetPack Specific Disclosures and Agreements

Some features listed below are not currently in use by the website.

Ads

This feature is only available to sites on the Security and Complete plans.

Data Used: The following information (made available from the visitor’s browser) is collected and sent to Automattic’s Demand Partners: IP address, geographical data (derived from the IP address), user agent, operating system, device type, unique user ID (randomly generated identifier), current URL, and IAB (Interactive Advertising Bureau) interest category. The advertising partners may use that information to display personalized ads to those visitors. The sharing of this information with the website advertising partners may be considered a “sale” of information under the CCPA. Log data (IP address, geographical data, user agent, operating system, device type) is stored for 30 days. The unique user ID is stored in cookies and is retained for 1 year.

Activity Tracked: Ad impressions, video-related events (i.e. pause, mute, 100% plays, etc.) or errors, and ad click events. Various cookies are used for the following purposes: delivering targeted advertisements to specific visitors, storing user identifiers, and collecting anonymous ad platform stats.

This feature is only accessible to users logged in to Wordpress.com.

Data Used: In order to process a comment like, the following information is used: Wordpress.com user ID/username (you must be logged in to use this feature), the local site-specific user ID (if the user is signed in to the site on which the like occurred), and a true/false data point that tells us if the user liked a specific comment. If you perform a like action from one of our mobile apps, some additional information is used to track the activity: IP address, user agent, timestamp of event, blog ID, browser language, country code, and device info.

Activity Tracked: Comment likes.

Contact Form

Data Used: If Akismet is enabled on the website, the contact form submission data — IP address, user agent, name, email address, website, and message — is submitted to the JetPack, Askimet service (also owned by Automattic) for the sole purpose of spam checking. The actual submission data is stored in the database of the site on which it was submitted and is emailed directly to the owner of the form (i.e. the site author who published the page on which the contact form resides). This email will include the submitter’s IP address, timestamp, name, email address, website, and message.

Data Synced (?): Post and post meta data associated with a user’s contact form submission. If JetPack, Askimet is enabled on the site, the IP address and user agent originally submitted with the comment are synced, as well, as they are stored in post meta.

GIF Block

Data Used: An iframe is inserted into the page, using an HTTP connection. The iframe is governed by Giphy’s privacy policy.

Activity Tracked: For details of what Giphy tracks, refer to their privacy policy.

Gravatar Hovercards

Data Used: This feature will send a hash of the user’s email address (if logged in to the site or Wordpress.com — or if they submitted a comment on the site using their email address that is attached to an active Gravatar profile) to the Gravatar service (also owned by Automattic) in order to retrieve their profile image.

Infinite Scroll

Data Used: In order to record page views via Wordpress.com Stats (which must be enabled for page view tracking here to work) with additional loads, the following information is used: IP address, Wordpress.com user ID (if logged in), Wordpress.com username (if logged in), user agent, visiting URL, referring URL, timestamp of event, browser language, country code.

Activity Tracked: Page views will be tracked with each additional load (i.e. when you scroll down to the bottom of the page and a new set of posts loads automatically). If the site owner has enabled Google Analytics to work with this feature, a page view event will also be sent to the appropriate Google Analytics account with each additional load.

JetPack Comments

Data Used: Commenter’s name, email address, and site URL (if provided via the comment form), timestamp, and IP address. Additionally, a jetpack.wordpress.com IFrame receives the following data: WordPress.com blog ID attached to the site, ID of the post on which the comment is being submitted, commenter’s local user ID (if available), commenter’s local username (if available), commenter’s site URL (if available), MD5 hash of the commenter’s email address (if available), and the comment content. If Askimet (also owned by Automattic) is enabled on the site, the following information is sent to the service for the sole purpose of spam checking: commenter’s name, email address, site URL, IP address, and user agent.

Activity Tracked: The comment author’s name, email address, and site URL (if provided during the comment submission) are stored in cookies. Learn more about these cookies.

Data Synced (?): All data and metadata (see above) associated with comments. This includes the status of the comment and, if JetPack, Askimet is enabled on the site, whether or not it was classified as spam by JetPack, Askimet.

Latest Instagram Posts Block

Data Used: The images are loaded into the post content with an API request in PHP.

Likes

This feature is only accessible to users logged in to Wordpress.com.

Data Used: In order to process a post like action, the following information is used: IP address, Wordpress.com user ID, Wordpress.com username, WordPress.com-connected site ID (on which the post was liked), post ID (of the post that was liked), user agent, timestamp of event, browser language, country code.

Activity Tracked: Post likes.

Map Block

Activity Tracked: Refer to the Mapbox privacy policy for details of any activity they track.

Mobile Theme

Data Used: A visitor’s preference on viewing the mobile version of a site.

Activity Tracked: A cookie (akm_mobile) is stored for 3.5 days to remember whether or not a visitor of the website wishes to view its mobile version. Learn more about this cookie.

Pinterest Block

Data Used: A pin is embedded using JavaScript resources loaded from Pinterest directly.

Activity Tracked: For details of what Pinterest tracks, refer to their privacy policy.

Payments Block

This feature is only available to sites on a paid JetPack plan.

Data Used: To facilitate new signup and renewals, the following is sent to Stripe (governed by Stripe TOS): Name, Credit Card number, CVV, Expiry date. Note – the credit card details are not stored by us – this data is collected and stored by Stripe. Wordpress.com systems are fully PCI compliant.

Activity Tracked: We plan to store anonymized analytics about which step in the purchase process was reached for the purpose of improving the user experience. Cookies may be stored to implement content blocking in the future.

Data Synced (?): We create a new Wordpress.com account for the user, or use the account associated with the email customer gives us. An explanation of Wordpress.com data used can be found here. History of signups and billing facilitated via this feature is stored on Wordpress.com servers for accounting and subsequent renewal purposes. For the purpose of renewing subscription, on our servers we store: Safely encrypted Stripe ID of the credit card connected to subscription, User id that initiated the purchase, Details about the product, Payment history for the subscription, Last 4 digits of the credit card and the brand – what is known in the industry as “safe details”. Also, we connect the ID of the credit card to the Wordpress.com user id, which allows for one-click payments on other subscription products sold on Wordpress.com network.

Repeat Visitor Block

Data Used: The Repeat Visitor block records page views by setting a cookie named `jp-visit-counter` in the visitor’s browser, which is incremented on each visit. This cookie is stored only in the browser and not recorded in our databases.

Pay with PayPal

This feature is only available to sites on the Security and Complete plans, and the actual payment processing is handled by PayPal.

Data Used: Transaction amount, transaction currency code, product title, product price, product ID, order quantity, PayPal payer ID, and PayPal transaction ID.

Activity Tracked: The PayPal payer ID, transaction ID, and HTTP referrer are sent with a payment completion tracking event that is attached to the site owner.

Data Synced (?): PayPal transaction ID, PayPal transaction status, PayPal product ID, quantity, price, customer email address, currency, and payment button CTA text.

Because payments are processed by PayPal, we recommend reviewing its privacy policy.

Video Hosting

This feature is only available to sites on the Security and Complete plans.

Data Used: For video play tracking via Wordpress.com Stats, the following information is used: viewer’s IP address, WordPress.com user ID (if logged in), Wordpress.com username (if logged in), user agent, visiting URL, referring URL, timestamp of event, browser language, country code. If Google Analytics is enabled, video play events will be sent there, as well.

Activity Tracked: Video plays.

WhatsApp Button Block

Activity Tracked: We don’t track any activity. For details of what WhatsApp tracks, refer to their Privacy Policy.

WooCommerce Shipping & Tax

Data Used: For payments with PayPal or Stripe: purchase total, currency, billing information. For taxes: the value of goods in the cart, value of shipping, destination address. For checkout rates: destination address, purchased product IDs, dimensions, weight, and quantities. For shipping labels: customer’s name, address as well as the dimensions, weight, and quantities of purchased products.

Data Synced (?): For payments, we send the purchase total, currency and customer’s billing information to the respective payment processor. Please see the respective third party’s privacy policy (Stripe’s Privacy Policy and PayPal’s Privacy Policy) for more details. For automated taxes we send the value of goods in the cart, the value of shipping, and the destination address to TaxJar. Please see TaxJar’s Privacy Policy for details about how they handle this information. For checkout rates we send the destination ZIP/postal code and purchased product dimensions, weight and quantities to the carrier directly or via EasyPost, depending on the service used. For shipping labels we send the customer’s name, address as well as the dimensions, weight, and quantities of purchased products to EasyPost. We also store the purchased shipping labels on our server to make it easy to reprint them and handle support requests.

Wordpress.com Secure Sign On

This feature is only accessible to registered users of the site with Wordpress.com accounts.

Data Used: User ID (local site and Wordpress.com), role (e.g. administrator), email address, username and display name. Additionally, for activity tracking (see below): IP address, Wordpress.com user ID, Wordpress.com username, WordPress.com-connected site ID and URL, JetPack version, user agent, visiting URL, referring URL, timestamp of event, browser language, country code.

Activity Tracked: The following usage events are recorded: starting the login process, completing the login process, failing the login process, successfully being redirected after login, and failing to be redirected after login. Several functionality cookies are also set, and these are detailed explicitly in our Cookie documentation.

Data Synced (?): The user ID and role of any user who successfully signed in via this feature.

Not all the features and services listed on this page are currently active or in use on the website. Inactive features and services are being listed in case they become active or updated in the future, as part of the standard agreement and privacy notice policies of the standard WordPress plugins and the website setup. See the website privacy policy page for more information on copyright agreements and fair use.