Privacy Policy

Last updated: May 10, 2026

1. Overview

This Privacy Policy explains how Al Amin ("I", "me") collects, uses, and protects your data when you visit askalamin.com, subscribe to my newsletter, book a consultation, enroll in a course, buy a book, or contact me.

2. Information I Collect

• Information you submit directly: name, email, phone, company, and project details via contact, lead, course admission, or comment forms. • Account information when you create an account on this site. • Payment data processed securely by Stripe — I do not store full card numbers. • Technical data: IP, browser, device, pages viewed, referrer (used for analytics and security). • Cookie & consent choices saved to honor your preferences.

3. How I Use It

Your data is used to: respond to your inquiries; deliver the services, courses, books, or podcasts you requested; send the newsletter you opted into; improve site UX through analytics; prevent abuse; and comply with legal obligations.

4. Legal Basis (GDPR)

I process your data based on: your consent (newsletters, marketing cookies), the performance of a contract (paid services, course delivery), my legitimate interests (security, basic analytics), and legal obligations (tax records).

5. Cookies & Tracking

This site uses cookies in four categories: strictly necessary (always on), analytics, marketing, and preferences. You choose what's on via the consent banner the first time you visit, and you can change your choice anytime by clicking "Cookie Preferences" in the footer.

6. Sharing & Sub-processors

I never sell your data. I share the minimum needed with trusted providers: Supabase (database & auth), Stripe (payments), Resend/email gateway (transactional & newsletter emails), and analytics tools where consented. Each provider operates under its own privacy commitments.

7. Data Retention

Lead and contact data: kept while the engagement is active, then archived for up to 24 months for follow-up unless you ask me to delete it. Course enrollment & purchase records: kept for the legally required accounting period. Anonymous analytics: aggregated and retained indefinitely.

8. Your Rights

You have the right to access, correct, export, or delete the personal data I hold about you, and to withdraw consent at any time. Email me through the contact page and I'll act within 30 days.

9. Security

I use Row-Level Security on the database, encrypted transport (HTTPS), hashed credentials, role-based access for admin areas, and audit logs. No system is 100% secure, but I follow current best practices and patch quickly when issues are reported.

10. Children

This site is intended for users 16+. I do not knowingly collect data from children under 16. If you believe a minor has submitted data, contact me and I'll delete it.

11. Updates

When this policy changes materially I'll update the "Last updated" date and, where appropriate, notify subscribers by email.

12. Contact

For any privacy question or data request, use the contact page. I respond personally within 1–2 business days.