Privacy notice

This notice explains what happens to your personal data when you use numanhussain.com. It is written to be read, not skimmed past. Last updated 24 September 2026.

Who is responsible

I am Numan Hussain, and I am the controller of the personal data collected through this site. If you have a question about your data, or want to use any of the rights below, email hello@numanhussain.com.

What I collect, and why

I only collect what you type into a form, and only to answer you.

• Contact form: your name, email, and optionally your company, phone number, the topic you chose and your message. I use it to reply to you.
• Booking a call: your name, email, the time you chose and your time zone, and optionally your company, role, team size, topic and note. For a paid session, the billing name and address, and a VAT number if you give one. I use it to hold the time, confirm it, run the session and invoice it.
• Asking to join a course: your name, email, and optionally a phone or WhatsApp number and a note, with the course you chose. I use it to send the invoice and joining details, and, if you are enrolled, to give you access.

The legal basis is taking steps at your request before a contract (answering an enquiry, booking a session, enrolling), and performing that contract once it exists. For invoices, it is also a legal obligation to keep accounting records.

I do not sell your data, share it for marketing, or add you to a newsletter. There is no newsletter.

What I do not collect

This site has no analytics, no advertising or tracking cookies and no third-party tracking scripts. Fonts are served from this site, not from Google.

Two things are stored in your browser: recent searches from the site search, kept on your own device so you can repeat them; and, only if you sign in, a session cookie that keeps you signed in. Neither is used to track you.

Where it is stored, and who else handles it

Form data is stored in a database run by Supabase, in its London (UK) region. A small number of services process it on my behalf, under their data processing terms:

• Supabase — the database and sign-in, hosted in London.
• Vercel — hosts this site and its server code. Requests may be processed on servers in the United States, under the safeguards in Vercel’s data processing terms.
• Resend — sends the emails this site generates, such as a booking confirmation, once email is switched on.

When a booking or course needs payment, the invoice is sent by email. If card payment is added later, card details will go to the payment provider directly and never through this site; this notice will say so first.

How long I keep it

• Enquiries and course requests that do not lead to work: up to two years after we last spoke, then deleted.
• Bookings, and anything connected to an invoice: six years after the end of the financial year they belong to, because UK accounting rules require it.
• Course accounts: for as long as you have access to the course, then as for bookings where a payment is involved.

Your rights

Under UK GDPR you can ask for a copy of your data, ask me to correct it, delete it or restrict how I use it, object to how I use it, and ask for it in a portable form. Email hello@numanhussain.com and I will answer within one month.

If you are unhappy with how I have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. I would appreciate the chance to put it right first.

Changes

If what this site collects changes — for example, if card payments or analytics are added — this notice is updated first, with a new date at the top.