01. Who is responsible for your data?
Walid E Abou Jawdeh is responsible for the personal data collected through this consultancy website (the data controller). For questions about this policy or to exercise your rights, email walid@jawdeh.com.
This policy covers visitors and enquiries relating to business management, IT and digital, project consultancy, and AI consultancy. Any additional processing agreed for a client project will be explained separately.
02. What information is collected?
The consultation form asks for your full name and email address. You may also provide a phone number and message. Name and email are required to submit the form; phone and message are optional. You can contact me directly by email instead.
Form submissions are stored in the website’s Forminator database and sent by email to walid@jawdeh.com. Correspondence may include your organisation, role, business requirements, and any other information you choose to share.
Hosting and security services may process technical information such as IP address, browser and device details, request times, and security events. Please do not include passwords, payment-card details, patient records, or other sensitive personal information in this general enquiry form.
03. Why your information is used
- Enquiries and consultations: to respond, understand your needs, and arrange a discussion. Where you request steps towards a contract, the basis is GDPR Article 6(1)(b). Other professional enquiries are handled under the legitimate interest of communicating with prospective clients, Article 6(1)(f).
- Website security: to prevent spam, abuse, and unauthorised access, based on the legitimate interest of maintaining a secure service, Article 6(1)(f).
- Legal obligations: to keep records or respond to lawful requirements where applicable, Article 6(1)(c).
- Optional marketing or tracking: where consent is required, it will be requested separately, Article 6(1)(a). Sending an enquiry does not subscribe you to a mailing list.
Your personal data is not sold. Enquiries are not used for decisions producing legal or similarly significant effects based solely on automated processing.
04. Service providers and international processing
Access is limited to people and service providers who need the information to handle enquiries, operate the website and email, maintain security, or provide professional support. Information may also be disclosed where legally required or necessary to establish, exercise, or defend legal claims.
Cloudflare Turnstile: the form uses Cloudflare to distinguish human visitors from bots. Cloudflare processes technical signals, including IP address, browser information, and the website origin. It acts as a processor for website protection and as a separate controller for improving its bot detection. See the Cloudflare Turnstile Privacy Addendum.
Google Fonts: the current website loads a font stylesheet from Google. When your browser requests these resources, technical connection data, including your IP address and browser headers, is transmitted to Google. See Google’s Privacy Policy.
Some providers operate internationally, so information may be processed outside the European Economic Area. Where GDPR applies, transfers require an applicable adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, together with additional measures where required. Contact walid@jawdeh.com for information about the providers and safeguards relevant to your data.
05. How long information is kept
Enquiry records are kept for as long as reasonably needed to respond, complete relevant follow-up, and maintain a record of the discussion. The period depends on whether an enquiry remains active, leads to a client relationship, or needs to be retained for a legal obligation or claim.
Client, accounting, and contractual records are subject to their applicable legal and contractual retention requirements. Security logs and backups follow the relevant service’s retention and rotation arrangements. Information no longer needed should be deleted or anonymised; copies in backups may remain until those backups expire. You can request information about the retention applicable to your enquiry by email.
06. Cookies and similar technologies
Cookies are small files stored by your browser. Similar technologies include local storage and security tokens. Their purpose matters: essential functionality is different from optional analytics or advertising.
- Essential operation and security: WordPress and security services may use cookies or tokens to support secure access, prevent abuse, and maintain requested functionality. WordPress login and administration cookies relate to authorised users, rather than ordinary public browsing.
- Turnstile: the consultation form runs a browser-based security check. Its technical processing is described above and in Cloudflare’s notice; it should not be treated as an advertising tracker.
- Optional tracking: no advertising or analytics tools have been configured as part of this landing page. If non-essential tracking is introduced, this policy will be updated and prior consent requested wherever required. Rejecting optional cookies must be as easy as accepting them.
Session cookies normally expire when the session ends; persistent items remain until their configured expiry or until deleted. Provider-specific security storage depends on the service and configuration. You can inspect and remove stored site data through your browser settings. Blocking essential storage or scripts may stop the form or security check from working; email remains an alternative.
Where optional cookie consent is used, you can withdraw it through the cookie controls offered at that time. Browser deletion alone does not withdraw consent already recorded with a service; contact walid@jawdeh.com if you need help.
07. Your GDPR rights
Where GDPR applies, you can request access to your personal data, correction, erasure, restriction of processing, and portability where the legal conditions are met. You can object to processing based on legitimate interests, including direct marketing. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.
Email walid@jawdeh.com with your request. Proportionate identity verification may be needed. Requests are normally answered within one month; any legally permitted extension and its reason will be explained within that month. Some rights are subject to legal exceptions, such as required record retention.
You may complain to a supervisory authority, particularly in the country where you live or work or where an alleged infringement occurred. In Spain, this is the Agencia Española de Protección de Datos (AEPD). You do not need to contact me first to exercise that right.
08. Security, children, and policy updates
Reasonable technical and organisational measures are used to protect information, including secure connections and controlled access. No internet transmission or storage system can be guaranteed completely secure.
This is a professional consultancy website and is not directed at children. If you believe a child has provided personal information, please contact walid@jawdeh.com so it can be reviewed and removed where appropriate.
This policy may change as the website, services, or legal requirements change. The latest version and update date will be shown on this page. Material changes affecting existing processing will be communicated where required.