Legal
Privacy Policy
Last updated: 28 September 2026
This policy explains how I handle personal data when you visit fsaleem.com, get in touch, book a session or work with me. I have kept it short because the site collects very little.
Effective date: 28 September 2026
1. Provider details
The person responsible for your personal data is:
- Name: Faisal Saleem
- Location: Dubai, United Arab Emirates
- Contact: [email protected]
Write to that address for any privacy question or request. There is no separate data protection officer; I handle requests personally.
2. The short version
- The site sets no cookies, has no login and no forms that send data to a server.
- There are no advertising or tracking scripts, and fonts are served from this site, not from a third party.
- If you email me, I receive what you choose to send.
- If I send you a booking link, the scheduling service collects your booking details and passes them to me.
- The hosting and security provider processes technical request data, such as IP addresses, to deliver the site and keep it secure.
- I do not sell your personal data or share it for advertising.
3. What I collect and how
Emails you send me. The contact links on the site open your own email program. Nothing is sent through the site. When you email me, I receive your name, email address, and whatever you include, such as a description of your situation and any attachments.
Booking details. If I send you a booking link, the scheduling service collects your name, email address and answers to a few questions about what you want to discuss, and sends them to me. I review each request and approve it manually.
Engagement records. If we work together, I keep what is needed to run the engagement: contact details, proposals and statements of work, correspondence, materials you share, notes from our sessions, and invoicing and payment records. Payment is arranged separately after I approve a booking or proposal. The site never asks for card or bank details. The payment processor handles those under its own terms, and I receive only confirmation of payment and basic transaction details.
Technical data. The site is hosted and delivered by Cloudflare. As part of delivering pages and protecting the site from abuse, Cloudflare processes technical data about each request: IP address, browser and device type, the pages requested, the referring page, and the date and time. I do not use this data to identify individual visitors.
Analytics. I may use Cloudflare Web Analytics to see aggregate figures such as page views, referrers and country-level traffic. It uses no cookies, does not build profiles, and does not track you across other sites.
Browser session storage. When you choose a service in the Engage section or open a service page, the site keeps that service name in your browser’s session storage so the contact section can pre-fill your email subject line. It resets on every page load and is never sent to me. You can also clear it with the “Clear” control.
I do not knowingly collect sensitive personal data, such as health information, and I ask that you do not send it unless it is essential to your question.
4. No cookies, so no cookie banner
fsaleem.com does not set cookies and does not use tracking technologies that need your consent. That is why there is no cookie banner. The session storage described above is used only to provide a feature you choose to use, and it never leaves your browser.
In limited cases, such as when traffic looks automated, Cloudflare may set a strictly necessary security cookie to tell people and bots apart. These cookies are not used for tracking or advertising.
5. Why I use your data
| Purpose | Why it is justified |
|---|---|
| Replying to your enquiry and discussing a possible engagement | You asked me to, before we agree anything, and I have a legitimate interest in replying to people who contact me |
| Handling bookings and delivering sessions or engagements | It is needed to perform our agreement |
| Invoicing, accounting and tax records | The law requires me to keep them |
| Running, securing and improving the site, including technical logs and aggregate analytics | My legitimate interest in a secure, working website |
| Establishing or defending legal claims | My legitimate interest in protecting my practice |
| Anything else I specifically ask your permission for | Your consent, which you can withdraw at any time |
I do not use your data for automated decision-making or profiling. I do not add you to a mailing list unless you ask to be added.
6. Who receives your data
I share personal data only with service providers that help me run the site and the practice, and only as far as they need it:
- Hosting, content delivery and security: Cloudflare.
- Scheduling: if I send you a booking link, the scheduling service behind it.
- Email: my email service provider, which stores the messages we exchange.
- Payments: the payment processor named on your invoice or payment link.
- Professional advisers: accountants, lawyers or auditors, where needed and bound by confidentiality.
- Authorities: where the law requires it.
These providers process data under their own terms and privacy commitments. I do not sell personal data, and I do not share it with anyone for their own marketing or advertising.
The LinkedIn and X links on the site take you to those platforms, which have their own privacy policies.
7. International transfers
I am based in the UAE, and my service providers operate mainly in the United States and the European Union. This means your data may be processed outside the country you live in.
I use established providers that protect international transfers with recognised contractual safeguards. Transfers are also sometimes necessary to reply to you or perform an agreement you asked for. You can ask me for more detail about the safeguards that apply.
8. How long I keep it
| Data | How long |
|---|---|
| Enquiries and booking requests that do not lead to an engagement | 24 months from the last contact, then deleted |
| Client engagement records: proposals, agreements, correspondence, working notes | For the engagement plus 24 months, unless we agree otherwise or a longer period is needed for a legal claim |
| Invoices, payment and accounting records | As long as tax and accounting law requires, typically five to seven years after the end of the relevant financial year |
| Technical request logs | Held by Cloudflare under its own retention periods. I do not keep separate copies |
| Aggregate analytics | Kept in aggregate form, with no personal profiles |
| Session storage in your browser | Until you close the tab or clear it |
When a period ends, I delete the data or anonymise it.
9. Your rights
Wherever you live, you can ask me to do the following with your personal data:
- Access: to get a copy of the personal data I hold about you.
- Correction: to fix inaccurate or incomplete data.
- Deletion: to have your data erased where I no longer need it or have no legal reason to keep it.
- Restriction and objection: to limit how I use your data, or to object to processing based on legitimate interests.
- Portability: to receive data you gave me in a common, machine-readable format.
- Withdrawing consent: where I rely on consent, at any time, without affecting what happened before.
If you are unhappy with how I have handled your data, you may also be able to complain to the data protection authority where you live. I would appreciate the chance to put things right first.
I do not sell personal information or share it for advertising, and I do not use it to infer characteristics about you. Asking to use any of these rights will not change how I treat you.
To use any of these rights, email [email protected]. I may need to confirm your identity before acting. I aim to reply within 30 days. If I need longer, I will tell you why.
10. Security
The site is served only over HTTPS, with security headers that limit framing, content sniffing and access to browser features such as the camera and location. Access to my email, scheduling and business records is protected by strong passwords and two-factor authentication. I keep the data I hold to a minimum. No system is perfectly secure, but if a breach affects your data and puts you at risk, I will tell you and the relevant authority as the law requires.
11. Materials you share during an engagement
During an engagement, you may share documents that contain other people’s personal data, such as employee, customer or supplier details. I use that data only to deliver the work, keep it confidential and return or delete it when the engagement ends, as set out in the Terms of Engagement. If your organisation needs a data processing agreement, ask and I will provide one.
12. Children
The site and my services are for adults, whether individuals, founders, business owners or companies. I do not knowingly collect personal data from anyone under 18. If you believe a child has sent me personal data, contact me and I will delete it.
13. Changes to this policy
If the way I handle data changes, for example when a new service provider is added or the business becomes a registered company, I will update this policy and the effective date at the top. Significant changes affecting current clients will be communicated directly.
14. Contact
Questions or requests: [email protected].