Last updated October 13, 2026
Tarik Zukic operates tarikzukic.com as an individual freelance website designer and developer in Washington, United States. This policy covers this website and information handled when you enquire about or purchase my website services. Individual apps and client websites have their own notices.
Prepared as a draft for review by a Washington-licensed attorney before reliance in a client engagement. These documents do not certify enforceability or replace legal advice.
Different documents do different jobs. The order below resolves a conflict about a website project only when the documents were provided and accepted as part of that engagement. Sending an enquiry does not create an agreement.
Applicable mandatory law comes first. No document in this chart removes a right or duty that the law does not allow the parties to change.
Use these to change a booked project: scope, price, dates or a particular obligation. Both parties must expressly accept the change in writing.
The most recent mutually accepted change controls only the provisions it expressly changes. It does not silently replace the rest of the agreement.
Use this to book your specific project. It identifies the parties, deliverables, exclusions, price, milestones, payment schedule and handover.
It takes priority over the standard service terms only where it expressly states a different or overriding term. For example, a stated 30/40/30 payment schedule overrides the standard 50/50 schedule for that project.
Use these for the default rules on payment, cancellation, revisions, ownership, confidentiality and liability. Keep the version attached to the agreement.
These terms fill the gaps where the accepted agreement does not expressly provide a different rule. Later changes to this website do not rewrite an existing engagement.
Use these to explore services and ask for a quote. Price ranges and examples help planning.
These are general information, not the final project scope, a binding price or an amendment. An expressly accepted written agreement is required to change project obligations.
The Privacy Policy explains how I handle website visitors, enquiries and business/project information. It applies alongside the project documents, rather than sitting below them as a waiver. A separately accepted data-processing or confidentiality agreement may add project-specific protections and responsibilities. It cannot remove mandatory privacy rights, authorize an undisclosed incompatible use, or make inaccurate privacy statements acceptable. Ask me before sending customer personal data or sensitive records.
Questions? Email infozukic5@gmail.com.
For privacy questions or requests, email infozukic5@gmail.com with the subject Privacy request. You can also use the contact form. Please do not include passwords, payment card details or sensitive personal records.
Enquiries may include your name, email address, business name, existing website, requested service and message. If we work together, I also handle proposals, approvals, project files, business contact details, invoices and payment status.
The form has two modes. When online sending is enabled, your details and an anti-spam verification token are sent to the configured contact endpoint and delivered by email. Otherwise, the form opens your email app with a draft; I receive it only if you send it. This website does not currently provide a public account-registration or online checkout flow.
I use information to answer enquiries, prepare quotes, perform agreed work, communicate about projects, invoice and record payments, maintain the website, prevent abuse and meet legal obligations. I do not sell personal information, use it for targeted advertising or add enquiry contacts to a marketing list without a separate opt-in.
Where a law requires a legal basis, the relevant basis may be steps you request before a contract, performance of a contract, legal obligations, proportionate legitimate interests in running and protecting the business, or consent for optional analytics. Consent can be withdrawn without affecting prior lawful processing.
AWS Amplify hosts this website. Hosting, email and security providers may process IP addresses, timestamps, requested URLs, browser or device information and technical logs to deliver and protect their services. Declining analytics does not stop information needed to deliver a page or protect a service.
Google Analytics 4 is loaded only after you opt in through Cookie settings. It can process page views, interactions, referring pages, browser and device information, approximate location and cookie identifiers. Google states that GA4 uses IP addresses to derive location and discards them before logging analytics data. This does not mean all hosting or security providers discard IP addresses.
You can accept analytics, reject it, or change your choice using Cookie settings in the footer. The choice is stored in your browser under tz-analytics-consent. A Global Privacy Control signal disables optional analytics on this site. Withdrawing consent stops future analytics collection here and clears accessible first-party Google Analytics cookies; it does not remove data already processed by Google.
The private preview portal uses portfolio-portal-session in session storage and the pf_portal_session cookie to remember preview access. The configured preview session expires after 12 hours. These access features are separate from optional analytics.
When online form sending is enabled, Google reCAPTCHA is used for security, fraud and abuse prevention. Google may process technical and interaction information, such as IP address, browser/device information and a verification token, and set a necessary verification cookie. This processing is separate from optional analytics. If you prefer not to use the online form, email me directly.
Private previews may contain your business identity, draft website content, project details and notes. Where project notes are enabled, Supabase provides storage. Preview access uses a shared password and browser session controls, not individual customer accounts. Do not put patient records, financial account data, government identifiers, credentials or other highly sensitive information into previews or project notes.
If a project requires processing your customers' personal information, we must separately agree roles, security requirements and any necessary data-processing terms before that work. A general website project does not include regulated-data hosting or a promise of HIPAA compliance.
I share information only as reasonably needed with hosting, email, analytics if enabled, security and project-storage providers; payment or accounting providers identified in the proposal or invoice if used; and professional advisers with confidentiality duties. I may disclose information when required by law or reasonably necessary to investigate abuse or protect legal rights. I do not publish confidential project information without permission.
Providers may process information in the United States and other countries. Where applicable law requires safeguards for an international transfer, those safeguards must be in place. Links to LinkedIn, app stores and project sites lead to services with their own privacy practices.
I retain enquiries as needed to respond and manage follow-up, and project, approval and financial records as needed for delivery, accounting, legal obligations and resolving disputes. Retention depends on the record and circumstances; there is no promise that every record is deleted on a fixed date. I periodically review records and delete or de-identify information no longer needed, subject to legal holds and backup cycles.
I use reasonable safeguards appropriate to the information and the service. No internet service is completely secure. Please request a suitable transfer method before sharing confidential material and keep your own copies of project files.
You can request access, correction or deletion of information I hold about you, or ask about use and sharing, at infozukic5@gmail.com. Depending on applicable law, you may also have rights to restrict processing, object, obtain a portable copy, withdraw consent, appeal a decision or complain to a regulator. I will handle requests within the deadlines required by applicable law, verify identity proportionately and explain any lawful exception, such as records needed for taxes or a dispute. You will not be penalized for exercising applicable privacy rights.
This website and its enquiry process are not intended for children under 18. I do not knowingly solicit their personal information. If you believe a child has supplied information, contact me so I can investigate and remove it where appropriate.
I will update this policy and its date when practices change. If applicable law requires separate notice or renewed consent, an update to this page alone does not replace that requirement.