Privacy Policy

This Privacy Policy explains how Humayn ("Humayn," "we," "our," "us") collects, uses, shares, and protects personal information when you visit gethumayn.com or interact with our services. It applies to all visitors and clients globally and is designed to comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable privacy laws.

If you do not agree with this Policy, please do not use our website or services.

For the purposes of GDPR and other applicable privacy laws, Humayn is the data controller for personal information collected through gethumayn.com.

Contact:

3.1Information You Provide Directly

When you book a call, email us, or otherwise communicate with us, we collect:

• —Name
• —Email address
• —Company name (if provided)
• —Message content
• —Scheduling details, if you book a call (your selected time, and any answers you give on the booking form)
• —Any other information you choose to share

3.2Information Collected Automatically

When you visit gethumayn.com, we automatically collect:

• —IP address and approximate location (derived from IP)
• —Browser type and version
• —Device type, operating system, and screen resolution
• —Pages visited and referring source, in aggregate
• —Referring website or traffic source
• —Date and time of visit
• —Server log data

3.3Information Collected Through Analytics and Embedded Tools

We keep tracking deliberately light. gethumayn.com uses:

• —Plausible Analytics, a privacy-focused tool that collects aggregate usage statistics without cookies and without storing personal identifiers
• —Calendly, embedded on the booking page, which sets its own cookies and presents its own notice when you use it

We do not use advertising pixels, session recording, or cross-site tracking. There is no Google Analytics and no Meta Pixel on this site. See Section 8 (Cookies and Tracking) for details.

4.1To Provide Services and Respond to Inquiries

• —Responding to booking requests and messages
• —Communicating about potential or active engagements
• —Sending invoices and billing communications

4.2To Operate and Improve Our Website

• —Understanding how visitors use the site
• —Monitoring site performance and security
• —Diagnosing technical issues
• —Improving user experience and content

4.3For Marketing and Analytics

• —Understanding, in aggregate, which pages visitors read and where they arrive from
• —Measuring aggregate interest in the audit and the booking flow

4.4For Legal and Security Purposes

• —Complying with legal obligations
• —Enforcing our Terms and Conditions
• —Protecting against fraud, abuse, and security threats

For visitors in the European Economic Area, United Kingdom, or other jurisdictions that require a legal basis for processing, we rely on the following:

Consent:

for marketing communications, if we ever send them. You can withdraw consent at any time. Our analytics is cookie-less and aggregate-only, so it does not rely on consent.

Legitimate Interests:

for basic site operation, security monitoring, and aggregate analytics that do not identify individuals.

Contractual Necessity:

for processing related to active engagements, invoicing, and service delivery.

Legal Obligation:

where processing is required by applicable law.

We do not sell your personal information. We share information only with the following categories of recipients:

6.1Service Providers (Data Processors)

We share data with third-party service providers who process information on our behalf:

Hosting and infrastructure:

Vercel Inc. (United States)

Analytics:

Plausible Insights OU (European Union). Cookie-less, aggregate-only website analytics.

Scheduling:

Calendly LLC (United States). When you book a call through gethumayn.com, Calendly receives your name, email address, any answers you give on its form, and your selected time. Calendly sets its own cookies and presents its own consent notice.

Email and communication:

Google Workspace (United States)

Invoicing and billing:

Zoho Corporation (United States / India)

Each processor is contractually required to safeguard your data and use it only for the specified purpose.

6.2Legal and Regulatory Disclosures

We may disclose personal information if required by law, subpoena, court order, or legitimate government request, or to protect our rights, property, or safety.

6.3Business Transfers

If Humayn is involved in a merger, acquisition, sale of assets, or restructuring, personal information may be transferred as part of that transaction. Affected individuals will be notified before any such transfer.

Humayn is based in Pakistan, and our service providers are located primarily in the United States. By using our services, you acknowledge that your information may be transferred to and processed in countries with different data protection standards than your country of residence.

For transfers from the European Economic Area, United Kingdom, or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent legal mechanisms.

gethumayn.com uses cookies and similar technologies in the following categories:

Our own cookies:

gethumayn.com itself sets none. Our analytics (Plausible) works without cookies or persistent identifiers.

Scheduling Cookies:

set by Calendly on the booking page so the scheduler can function. Calendly presents its own consent notice; if you would rather not use it, you can email us instead and we will arrange a time by hand.

We do not place non-essential cookies, which is why there is no cookie banner on this site. The only cookies you may encounter come from the Calendly scheduler on the booking page, and Calendly asks for its own consent when you use it.

There is nothing to opt out of on our side: Plausible is aggregate-only and cookie-less. If you would rather not use the Calendly scheduler, email us instead and we will arrange a time by hand. Disabling cookies in your browser may affect the booking page only.

We retain personal information only as long as necessary for the purposes described in this Policy, or as required by law:

Email and booking enquiries:

up to 24 months. If you become a client, retention extends through the engagement plus 7 years for tax and legal records.

Analytics data:

retained per the analytics provider's default period (typically 14 to 26 months).

Server logs:

up to 90 days.

Billing and invoicing records:

7 years for tax and accounting purposes.

Depending on your jurisdiction, you have the following rights regarding your personal information:

10.1Rights Under GDPR / UK GDPR

Right to Access:

request a copy of the personal information we hold about you.

Right to Rectification:

correct inaccurate or incomplete information.

Right to Erasure:

request deletion of your information (subject to legal exceptions).

Right to Restriction:

limit how we process your information.

Right to Data Portability:

receive your information in a structured, machine-readable format.

Right to Object:

object to processing based on legitimate interests or for direct marketing.

Right to Withdraw Consent:

withdraw consent at any time, where processing is based on consent.

Right to Lodge a Complaint:

file a complaint with your local data protection authority.

10.2Rights Under CCPA / CPRA (California Residents)

Right to Know:

request disclosure of the categories and specific pieces of personal information collected, used, shared, or sold.

Right to Delete:

request deletion of personal information (with certain exceptions).

Right to Correct:

request correction of inaccurate personal information.

Right to Opt-Out of Sale or Sharing:

Humayn does not sell personal information, and we do not use the advertising cookies or cross-context tracking that the CPRA treats as "sharing". For any privacy request, email mohsin@gethumayn.com.

Right to Limit Use of Sensitive Personal Information:

we do not collect sensitive personal information for purposes other than those permitted under the CPRA.

Right to Non-Discrimination:

we will not discriminate against you for exercising your privacy rights.

10.3How to Exercise Your Rights

To exercise any of these rights, email mohsin@gethumayn.com. We will respond within 30 days (GDPR) or 45 days (CCPA), as required by applicable law. We may need to verify your identity before fulfilling certain requests.

gethumayn.com is not directed to children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected information from a child under 16 without verified parental consent, we will delete it promptly. Parents or guardians who believe their child has provided personal information may contact us at mohsin@gethumayn.com.

We implement reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/HTTPS), access controls, and regular security reviews. No method of transmission or storage is fully secure, however, and we cannot guarantee absolute security.

gethumayn.com may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

Some browsers transmit "Do Not Track" (DNT) signals. There is no industry-standard interpretation of DNT signals, and we do not act on them, but in practice our analytics is already cookie-less and aggregate-only. For any request, email mohsin@gethumayn.com.

We do not use automated decision-making, including profiling, that produces legal effects or significantly affects you.

We may update this Privacy Policy from time to time. The "Effective Date" at the top of this Policy will reflect the date of the most recent update. For material changes, we will provide notice through the website or by email where appropriate. Continued use of gethumayn.com after the effective date of any update constitutes acceptance of the updated Policy.

For questions, concerns, or to exercise your privacy rights: