Global Privacy Policy

1. Identity & Operating Entities

This Privacy Policy governs the data collection, processing, and protection practices of The Imran Ahmed ("Agency", "We", "Us", or "Our"), providing performance marketing, Generative Engine Optimization (GEO), server-side conversion tracking, and growth consulting services to enterprise and direct-to-consumer clients globally.

For all inquiries regarding this policy or data protection requests, you may contact our designated compliance team directly at [email protected].

2. Categories of Information We Collect

We collect information only to the extent necessary to deliver high-performance consulting, process inquiries, and operate secure digital infrastructure:

• Direct Inquiries & Audit Data: When you request a Free Marketing Audit, submit a contact form, or schedule a strategy consultation, we collect your name, business email address, company website URL, target market, monthly advertising budget range, and self-reported growth bottlenecks.
• Client Operational Credentials: When executing managed marketing campaigns, clients may provision delegated access to advertising accounts (e.g., Meta Business Manager, Google Ads, TikTok Ads Manager), Google Analytics 4, Google Tag Manager, or website repositories under strict mutual non-disclosure.
• Technical & Edge Telemetry: When visiting our digital properties, our hosting infrastructure (Cloudflare edge network) automatically logs non-sensitive technical headers, including IP address (processed for coarse country-level geo-routing and DDoS mitigation), browser type, referring URL, and page response latency.
• Attribution & Conversion Signals: In accordance with modern first-party tracking standards, we process pseudonymous click identifiers (e.g., _fbp, _fbc, gclid) to verify marketing efficiency.

3. Legal Bases for Processing (GDPR Compliance)

If you reside within the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data under the following lawful bases recognized under the EU General Data Protection Regulation (GDPR Article 6):

4. First-Party Tracking, Cookies & Conversion APIs

We adhere to privacy-preserving measurement standards. Unlike legacy platforms relying on intrusive third-party cross-site cookies, our systems emphasize:

• First-Party Attribution: Measurement tokens are tied strictly to the theimranahmed.com root domain and expire automatically within 90 days.
• Cryptographic PII Hashing: Where Conversion APIs (Meta CAPI, Google Enhanced Conversions, TikTok Events API) are deployed, customer identifying information is cryptographically transformed using SHA-256 one-way hashing prior to transmission.
• Bot Defense & Turnstile: We use Cloudflare Turnstile to protect intake forms from automated abuse without serving invasive visual CAPTCHA challenges or tracking users across unrelated websites.

5. Information Sharing & Third-Party Service Providers

We do not sell, rent, lease, or monetize your personal information. We disclose data exclusively to vetted infrastructure partners who operate under strict contractual data protection agreements:

• Edge Infrastructure & Security: Cloudflare, Inc. (Global CDN, DNS, D1 SQL Database, and Workers KV).
• Communications & Email: Hostinger International Ltd (Corporate Email & SPF/DMARC routing).
• Authorized Payment Gateways: For courseware or digital licenses, transactions are securely processed by authorized third-party PCI-DSS compliant providers (Stripe, bKash, SSLCommerz). We never store raw credit card or mobile wallet PIN numbers.

6. International Cross-Border Data Transfers

Because we operate a global growth practice, data collected from users in one jurisdiction may be transferred to, processed, and stored in servers located in the United States, Europe, or other international Cloudflare points of presence. Whenever data is transferred outside the European Economic Area, we ensure appropriate safeguards are maintained through Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Your Global Privacy Rights (GDPR & CCPA/CPRA)

Depending on your geographic residency, you are entitled to exercise the following legal rights without discrimination:

To submit a verified data subject request, email [email protected] with the subject line "Privacy Rights Request". We verify identity and respond within thirty (30) calendar days.

8. Security Safeguards & Data Retention

We implement robust administrative, technical, and physical safeguards designed to prevent unauthorized access, alteration, or disclosure. All web traffic is enforced over TLS 1.3 encryption. We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by applicable statutory accounting and legal compliance periods.

9. Changes to This Privacy Policy

We may revise this Privacy Policy periodically to reflect technological updates, regulatory changes, or adjustments to our service offerings. The updated document will be published on this page with an amended "Effective Date" at the top. We encourage you to review this policy periodically.