Privacy Policy

Effective Date: March 25, 2025

Latest Revision: June 03, 2025

This Privacy Policy outlines how Zayd Hassoune (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit or interact with https://www.zaydhassoune.com (the “Website”).

We process your data in accordance with applicable privacy regulations, including the General Data Protection Regulation (GDPR).

1. Owner and Data Controller

Zayd Hassoune

privacy@zaydhassoune.com

2. Types of Data Collected

We may collect, store, and process the following categories of data:

a. Data Provided by You

Full name, email, phone number
Information entered into contact forms
Business-related details from consultations or inquiries
Newsletter subscription preferences

b. Data Collected Automatically

IP address and approximate location (country, time zone)
Browser, device type, OS, screen resolution
Session data: pages visited, scroll position, interactions, dwell time
Clicks, touch gestures, keypress events (if applicable)
Referral source, access times

c. Tracking Technologies

We use cookies and third-party tracking tools (e.g. Google Analytics) to analyze user behavior, improve performance, and manage traffic. Refer to our Cookies Policy for more information.

d. Special Category Data

We do not intentionally collect special category (sensitive) data. Please do not submit such information via our website.

3. Purpose and Legal Basis of Processing

We process your data for the following purposes and under the corresponding legal bases:

Purpose	Legal Basis
Responding to contact form submissions	Legitimate interest
Sending updates or newsletters	Consent
Analyzing site usage (via cookies)	Consent or Legitimate interest
Providing tailored business proposals	Performance of contract
Ensuring website functionality and security	Legitimate interest
Complying with legal or regulatory obligations	Legal obligation

You may withdraw your consent at any time by contacting us.

4. Methods and Place of Processing

Your data is processed using secure IT systems and tools, following structured procedures to ensure confidentiality and integrity.

Access is restricted to authorized parties (owner, technical providers, system administrators, etc.)
Processing may occur outside your country of residence; if so, appropriate safeguards (e.g. Standard Contractual Clauses, EU-US Data Privacy Framework) are applied.

5. Data Retention

We retain your data only for as long as necessary:

Contact form inquiries: retained up to 12 months
Newsletter subscriptions: until unsubscribed
Analytics data: up to 26 months
Contractual communications: up to 7 years (for legal records)

Once the retention period ends, your data will be securely deleted or anonymized.

6. Your Rights Under GDPR

You may exercise the following rights at any time:

Right to access: know what data we hold and request a copy
Right to rectification: correct inaccurate or outdated data
Right to erasure: request deletion of your data (“right to be forgotten”)
Right to restriction: limit processing in specific cases
Right to data portability: transfer your data to another service
Right to object: oppose processing based on legitimate interests
Right to withdraw consent: revoke any prior consent given
Right to lodge a complaint: with your local data authority

To make a request, contact us at: privacy@zaydhassoune.com

We will respond within 30 days, free of charge.

7. System Logs and Maintenance

For security and operational purposes, the website and third-party services may log interactions (e.g. IP address, errors, diagnostics). These logs help maintain system integrity and prevent abuse.

8. Data Sharing and Processors

Your personal data may be shared with trusted third-party service providers such as:

Web hosting and cloud infrastructure
Analytics platforms (e.g. Google Analytics)
Email delivery systems
Legal or technical consultants

All processors are bound by contractual obligations to ensure data protection and confidentiality.

9. International Data Transfers

Data may be stored or processed in jurisdictions outside your own. In such cases, we implement:

GDPR-approved safeguards, such as SCCs or participation in Privacy Frameworks
Contractual assurances with third-party providers

10. Children’s Data

Our services are not intended for children under 18. We do not knowingly collect data from minors.

11. Updates to This Policy

We may update this Privacy Policy at any time. Significant changes will be communicated through this page or via email (if applicable). Please review periodically.

12. Contact

If you have questions, concerns, or requests regarding this policy: