Privacy Policy.

01 What this policy covers

This Privacy Policy explains how [Assani Consulting / legal entity name] ("we", "us") collects, uses, and protects personal data when you visit this website, submit an application or contact form, or book a call. It applies to visitors and clients regardless of location, including those in the United States, United Kingdom, Norway (EEA), the UAE, and Saudi Arabia.

02 The data we collect

We collect the personal data you choose to give us through the forms on this site, which may include:

• Your name and email address
• Your business type, business website, or approximate monthly revenue range (where asked, e.g. in a qualifying form)
• Any message, question, or context you write in a free-text field
• Scheduling details when you book a call (name, email, and time zone, handled by our booking provider)

We do not currently collect payment card details directly — payments are handled by third-party payment processors, who have their own privacy practices.

03 How we use your data

We use the data you submit to:

• Respond to your enquiry or application
• Assess whether we're a good fit to work together
• Schedule and conduct consultation calls
• Deliver services you've engaged us for
• Send you materials you've specifically requested (such as a checklist or guide)
• Meet our legal, accounting, and tax obligations

We do not sell your personal data, and we do not use it for unrelated advertising purposes.

04 Legal basis for processing (EEA / UK visitors)

Where UK or EU/EEA data protection law applies (relevant, for example, to visitors in Norway or the UK), we rely on the following legal bases:

• Consent — when you voluntarily submit a form to contact us or request something specific
• Contract — where processing is necessary to deliver a service you've engaged us for
• Legitimate interests — for example, responding to enquiries and keeping basic records of our business communications, balanced against your rights

05 Who we share data with

We use a small number of trusted third-party tools to run this website and our booking process. These providers process data on our behalf and have their own privacy policies:

• Web3Forms — processes form submissions from this website and delivers them to our inbox
• Calendly — handles call scheduling, booking confirmations, and calendar reminders

We do not share your data with third parties for their own marketing purposes. We may disclose data where required by law, or to protect our legal rights.

06 International data transfers

Because we work with international clients and use third-party tools that may process data outside your home country (including in the United States), your data may be transferred across borders. Where required, we rely on the safeguards our processors provide (such as standard contractual clauses or equivalent mechanisms) for these transfers.

07 How long we keep data

We keep enquiry, application, and client data for as long as reasonably needed to respond to you, deliver services, meet legal and accounting obligations, and maintain reasonable business records — after which it is deleted or anonymised, unless we're required to keep it longer by law.

08 Your rights

Depending on where you live, you may have rights over your personal data, which can include the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Lodge a complaint with your local data protection authority (for example, the ICO in the UK, or Datatilsynet in Norway)

This reflects rights available under the UK/EU GDPR, and broadly similar principles found in Saudi Arabia's Personal Data Protection Law (PDPL) and the UAE's PDPL. To exercise any of these rights, contact us using the details at the bottom of this page.

09 Cookies & tracking

This website loads fonts from Google Fonts and Fontshare, and — where used — the Calendly booking widget, which may set minimal technical cookies needed for those services to function. We do not currently use advertising or cross-site tracking cookies.

10 Children's privacy

This website and our services are intended for business use by adults. We do not knowingly collect personal data from anyone under the age of 18.

11 Data security

We take reasonable technical and organisational measures to protect the data we hold, and rely on reputable third-party providers with their own security practices for form handling and scheduling. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12 Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page shows the most recent revision.