Privacy Policy

    Last updated: 8/5/2026

    1. Introduction

    Hussam.link ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our services.

    2. Information We Collect

    We may collect:

    • Contact details you submit (name, email, phone, company).
    • Project details shared via our "Book a Strategy Call" form.
    • Technical data such as IP address, browser type, and device info.
    • Usage data via cookies and analytics tools.
    • Behavioral metrics, heatmaps, and session replays captured via Microsoft Clarity (see section 4a).

    2a. Cookies & Tracking Technologies

    We use strictly necessary cookies to operate the site, and — only with your consent — analytics cookies from Google Analytics 4 and Microsoft Clarity (including heatmaps and session replay). No non-essential tracker loads before you choose. The full register of cookies, their providers, purposes, and durations is in our Cookie Policy. You can change or withdraw your consent at any time, as easily as you gave it:

    2b. Lawful Basis for Processing

    Where the GDPR, UK GDPR, or India's DPDP Act applies, we rely on the following bases:

    • Consent (Art. 6(1)(a)) — analytics and session replay cookies, marketing emails and newsletters, and optional AI features you choose to use.
    • Contract (Art. 6(1)(b)) — delivering services, issuing quotes and invoices, and operating the client and partner portals.
    • Legitimate interests (Art. 6(1)(f)) — responding to business enquiries, securing our systems, preventing fraud and abuse, and improving our services. We balance these against your rights and you may object at any time.
    • Legal obligation (Art. 6(1)(c)) — tax, accounting, and statutory record-keeping.

    3. How We Use Your Information

    • To respond to inquiries and deliver our services.
    • To send WhatsApp/email notifications about your opportunity.
    • To improve our website, offerings, and user experience.
    • To comply with legal obligations.

    4. Sharing of Information

    We do not sell your personal data. We may share data with trusted service providers (e.g., Meta WhatsApp Cloud API, email providers, hosting) strictly to operate our services. The complete list, with the data each one processes and where it is located, is published on our Subprocessors page. We may also disclose data where required by law or to establish, exercise, or defend legal claims.

    4b. International Data Transfers

    Hussam.link is established in India. Some of our service providers are located in the United States, the European Union, or Singapore, so your data may be transferred outside your country. Where personal data of EEA or UK individuals is transferred, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), supported by the technical and organisational measures described on our Security page. Transfer documentation is available on request.

    4a. Microsoft Clarity

    We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products and services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud and security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

    5. Data Retention

    We keep personal data only as long as necessary for the purpose it was collected for, or as required by law. Our current retention schedule:

    Data retention schedule
    Data categoryRetentionBasis
    Website enquiry and strategy-call form submissions24 months from last contactLegitimate interest — responding to and following up on business enquiries
    Newsletter subscriber recordsUntil unsubscribe, then 12 months of suppression-list retentionConsent (Art. 6(1)(a)) — suppression retained on legal obligation
    Client contracts, invoices, and accounting records8 yearsLegal obligation — Indian tax and companies record-keeping requirements
    AI assistant conversation logs90 daysLegitimate interest — safety, abuse prevention, and quality review
    Analytics data (GA4 / Clarity)GA4: 14 months · Clarity: per Microsoft's retention (currently 30 days for recordings)Consent (Art. 6(1)(a))
    Server, security, and application error logs12 monthsLegitimate interest — security monitoring and incident investigation
    WhatsApp and email correspondence36 months from last messageLegitimate interest — relationship management and dispute defence

    6. Your Rights

    Subject to your jurisdiction, you have the right to:

    • Access the personal data we hold about you and obtain a copy.
    • Rectify inaccurate or incomplete data.
    • Erase your data — see our Data Deletion page.
    • Restrict processing in certain circumstances.
    • Object to processing based on legitimate interests, and to direct marketing at any time.
    • Data portability — receive your data in a structured, machine-readable format.
    • Withdraw consent at any time, without affecting processing already carried out.
    • Not be subject to a decision with legal or similarly significant effects based solely on automated processing.
    • Lodge a complaint with your supervisory authority or data protection regulator.

    How to exercise them: email Privacy@Hussam.link with the subject "Privacy Request". We verify identity before acting and respond within 30 days (within 45 days where the CCPA/CPRA applies). There is no charge unless a request is manifestly unfounded or excessive.

    6a. Regional Rights

    • EEA / UK (GDPR, UK GDPR): the full rights set above, plus the right to complain to your national supervisory authority or the UK ICO.
    • India (DPDP Act, 2023): rights of access, correction, erasure, grievance redressal, and nomination. Our Grievance Officer is the founder of Hussam.link, contactable at Privacy@Hussam.link, Mysore, Karnataka, India. Grievances are acknowledged within 7 days and resolved within 30 days.
    • California (CCPA/CPRA): rights to know, delete, correct, opt out of sale or sharing, and limit use of sensitive personal information; and the right not to receive discriminatory treatment for exercising them. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not process sensitive personal information for inferring characteristics.
    • Other jurisdictions (LGPD, PIPEDA, POPIA, APPI, PDPA, PDPL, FADP, Australia, New Zealand): we honour equivalent rights on request through the same contact route.

    6b. Children's Privacy

    Our website and services are intended for businesses and are not directed to children. We do not knowingly collect personal data from anyone under 18 years of age (or under 16 in the EEA/UK). If you believe a child has provided us data, contact Privacy@Hussam.link and we will delete it.

    7. Security

    We implement reasonable technical and organizational measures to protect your data, but no method of transmission over the internet is 100% secure. Our controls, retention, incident response, and responsible disclosure policy are described on our Security page. We are not ISO 27001 certified and have not completed a SOC 2 audit; we do not claim any third-party security attestation.

    8. Third-Party Links

    Our site may contain links to third-party sites. We are not responsible for their privacy practices.

    9. Responsible AI

    Where we use AI to process your data — including to qualify, route, or respond to inquiries — we apply the safeguards described in our Responsible AI commitment: human oversight on meaningful decisions, transparency about AI use, bias and safety testing, and minimum-necessary data collection. Your personal data is never used to train third-party AI models without your explicit consent.

    10. Changes to This Policy

    We may update this Privacy Policy from time to time. The latest version will always be posted on this page.

    11. Contact

    For privacy-related questions, contact us at Privacy@Hussam.link. Postal: Hussam.link, Mysore, Karnataka, India. Data controller: Hussam.link (Udyam UDYAM-KR-22-0155393). A full due-diligence pack, including our DPA and subprocessor list, is available in the Trust Center.

    12. EU / UK Representative

    Hussam.link is established in India. Where an Article 27 GDPR representative in the EU or UK is required for our processing, we will appoint one and publish their details here. Until then, EEA and UK individuals may contact us directly at Privacy@Hussam.link.