Privacy Policy

This website is operated by Amjad Osman / ADSI as an EU-based independent service provider, unless a specific proposal or contract names a different contracting entity. For privacy questions, requests, or deletion enquiries, contact hello@amjadosman.com.

For normal website enquiries, project discussions, bookings, and delivery communication, I act as the controller of the personal data I decide to collect and use. For client systems, documents, or datasets handled inside a paid engagement, the signed scope or data processing terms may define a different role, including processor or subcontractor.

This policy covers personal data processed through this website, booking links, email conversations, free self-help tools, project enquiries, and ordinary service delivery communication.

It does not replace a project-specific data processing agreement, non-disclosure agreement, statement of work, or client security requirement. Where a signed project document conflicts with this website policy, the signed project document controls for that engagement.

I try to collect only what is needed to understand a request, reply properly, and deliver agreed work. Depending on how you interact with the site or services, this may include:

• Contact details such as name, email address, company, role, country, and preferred communication channel.
• Project information you choose to send, including business goals, website URLs, brand assets, process descriptions, operational documents, or examples of current workflows.
• Booking information such as selected meeting time, meeting notes, calendar metadata, and any message you add to the booking form.
• Free tool inputs and outputs, such as text you paste into an audit, SOP builder, KPI audit, dashboard builder, or page critique tool.
• Technical information normally sent by browsers and hosting providers, such as IP address, device/browser type, approximate location, pages visited, timestamps, and security logs.
• Billing and commercial information if you become a client, such as proposal details, invoices, payment status, tax or business registration details, and contract records.

Please do not submit passwords, payment card numbers, government ID numbers, health information, special-category data, children’s data, or highly confidential client data through public forms or free tools unless I have specifically agreed a secure method with you.

If a project requires sensitive, regulated, or confidential data, we should agree the handling method, access controls, retention period, and any data processing agreement before the data is shared.

I use personal data for practical business purposes connected to this website and services:

• To respond to enquiries, prepare proposals, and decide whether a project is a good fit.
• To schedule calls and manage calendar invitations.
• To run free self-help tools and return the requested output.
• To deliver agreed services, manage project communication, prepare documents, configure systems, and provide handover support.
• To maintain business records, invoices, accounting, compliance, and tax documentation.
• To protect the website, prevent abuse, debug errors, monitor service availability, and maintain security.
• To improve content, services, and tools based on aggregated or non-identifying usage patterns.

Where the GDPR or similar EU/EEA data protection rules apply, I rely on one or more legal bases depending on the context:

• Contract or pre-contract steps: when you ask for a proposal, book a call, or engage me to deliver services.
• Legitimate interests: to respond to business enquiries, maintain records, secure the website, improve services, and communicate with existing or prospective clients in a proportionate way.
• Consent: where I ask for optional permission, such as optional marketing emails or optional cookies if they are added later.
• Legal obligation: where records must be kept for accounting, tax, compliance, dispute, or regulatory reasons.

The free self-help tools are intended to provide surface-level audits, drafts, and structured starting points. They are not legal, financial, security, HR, or compliance advice. You should review outputs before using them operationally.

Some tool or automation features may use third-party infrastructure or AI services to process the text you submit. Do not paste confidential, regulated, or sensitive data into free tools unless you are comfortable with that processing and the data is appropriate for the tool.

This website and service workflow may rely on trusted third-party providers for hosting, analytics or diagnostics, calendar booking, email, document storage, payments, project management, automation, and AI-assisted processing. These providers process data only for the relevant operational purpose.

Examples may include website hosting providers, calendar and meeting platforms, email providers, cloud document tools, payment or invoicing providers, and AI API providers. Each provider may also have its own privacy terms when you interact with it directly.

Because I work with clients in the EU, GCC, and other regions, and because common cloud providers may operate internationally, personal data may be processed outside your country. When EU/EEA personal data is transferred internationally, I aim to use appropriate safeguards such as reputable providers, contractual protections, EU adequacy decisions where available, or standard contractual clauses where relevant.

For GCC clients, I aim to handle data in a way that respects applicable local privacy expectations and any project-specific requirements agreed in writing, including restrictions on cross-border transfers where they apply.

I keep personal data only as long as reasonably needed for the purpose it was collected, unless a longer period is required for legal, tax, accounting, dispute, or legitimate business reasons.

• Enquiry and contact messages: usually kept for up to 24 months unless they become part of a client record.
• Project and delivery records: usually kept for up to 7 years where needed for business, tax, warranty, or dispute records.
• Free tool inputs and outputs: kept only as needed to provide the output, debug abuse or errors, or improve the tool, unless a tool states otherwise.
• Invoices, contracts, and accounting records: kept for the period required by applicable tax and accounting law.
• Security logs: kept for a limited period appropriate to security, debugging, and abuse prevention.

Depending on where you are located, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. EU/EEA users also have GDPR rights, including the right to complain to a supervisory authority.

GCC privacy laws, including frameworks such as the UAE Personal Data Protection Law and Saudi Arabia’s Personal Data Protection Law, also recognise transparency and individual rights in various contexts. If those laws apply to your data, I will handle requests in line with the applicable project and legal context.

To make a request, email hello@amjadosman.com. I may need to verify your identity before acting on the request. I aim to respond within one month where GDPR applies, unless the request is complex or the law allows more time.

I use reasonable technical and organisational measures to protect personal data, including controlled access, reputable hosting and cloud providers, account security practices, and project-specific access controls where needed.

No website, email system, or cloud service can be guaranteed completely secure. If you believe information has been sent to me by mistake or there is a security issue, contact hello@amjadosman.com promptly.

This site currently aims to keep tracking minimal. If optional analytics, advertising pixels, or non-essential cookies are added later, the site should provide a clear notice and, where required, a consent choice.

Essential technical storage may be used where needed for security, language preferences, routing, forms, or normal website operation.

I may update this policy when the website, services, tools, providers, or legal requirements change. The latest version will be posted on this page with the updated date.