Effective date: May 10, 2026
Last updated: May 10, 2026
This policy explains what information I collect when you visit yassersoliman.com or interact with me through this site, why I collect it, who I share it with, and the choices and rights you have. It is written to comply with Quebec’s Law 25, Canada’s PIPEDA, the EU and UK GDPR, and California’s CCPA/CPRA.
Who is responsible for your information
This site is operated by Soliman Digital Inc., a Canadian corporation based in Montreal, Quebec. I am the sole operator and the person in charge of the protection of personal information under Quebec’s Law 25.
Contact:
Yasser Soliman, Privacy Officer
Soliman Digital Inc.
Montreal, Quebec, Canada
Email: [email protected]
What I collect
When you visit the site
With your consent through the cookie banner, I collect basic analytics information so I can understand how the site is used and improve it. This includes:
- Pages you view, the order you view them, and how long you stay
- How you arrived (search engine, direct, a link from another site)
- Approximate location (country and region, derived from IP address)
- Device type, operating system, browser, and screen size
- A randomly assigned, non-identifying analytics ID stored in a cookie or local storage
If you decline analytics in the cookie banner, none of the above is collected in an identifiable form. Google Consent Mode v2 may still send anonymous, aggregated pings that do not identify you individually.
When you contact me through a form or email
- Your name, email address, and anything else you choose to share in the message
- The date and time of the message
When you book a call through Calendly
- Your name and email address
- The time slot you select
- Any optional notes or answers you provide to pre-call questions
- Standard meeting metadata (timezone, calendar invite acceptance)
Calendly processes this information on my behalf. See “Who I share data with” below.
Server logs
My hosting provider keeps standard server access logs for security, debugging, and abuse prevention. Logs typically include IP address, user agent, request path, response code, and timestamp. These are retained for a short window (usually 30 to 90 days) and are not used for analytics or marketing.
Why I collect it
- To operate the site: serve pages, keep things secure, debug issues. Legal basis: legitimate interest under GDPR; necessary for operation under PIPEDA
- To respond to you: reply to messages, schedule calls, follow up on inquiries. Legal basis: taking steps at your request prior to entering a contract
- To measure how the site performs: understand which pages are useful, find broken paths, improve content. Legal basis: your consent, given through the cookie banner
- To meet legal obligations: respond to lawful requests, defend against legal claims, comply with tax and corporate requirements
I do not sell your personal information. I do not share it with advertisers for behavioral profiling. I do not buy data from data brokers.
Cookies and similar technologies
This site uses cookies and similar technologies in three categories:
- Functional: required for the site to work (session, security, consent state). Always on
- Statistics: Google Analytics 4 and Ahrefs Analytics, used to understand site usage. Off by default, only loaded after you accept analytics in the banner
- Marketing: none active at this time. If I add any (for example, ad measurement), they would only fire after you accept marketing in the banner
You can review and change your choices at any time through the consent banner. A detailed cookie list is maintained on the Cookie Policy page.
Who I share data with
I use a small number of third-party services to operate this site and respond to inquiries. Each receives only the data necessary to perform its function.
- Google (GA4, Google Tag Manager, Site Kit): analytics. Data processed in the United States under Google’s standard contractual clauses
- Ahrefs Analytics: privacy-focused analytics. Data processed in Singapore and the United States
- Calendly: meeting scheduling. Data processed in the United States. Calendly Privacy Policy
- WP Engine: website hosting. Data processed in the United States. WP Engine Privacy Policy
- Google Workspace (Gmail): email correspondence. Data processed in the United States and globally
If I add or remove any provider, I will update this list and the effective date above.
International transfers
Some of the providers above process data outside of Canada, including in the United States. Where data is transferred outside Quebec or the European Economic Area, I rely on contractual safeguards (standard contractual clauses or equivalent) and the provider’s own compliance measures. You can request a summary of these safeguards at any time.
How long I keep it
- Analytics data: up to 14 months in Google Analytics, then deleted automatically
- Form submissions and emails: up to 24 months, longer if you become a client and the records are needed for tax, legal, or contractual reasons
- Calendly bookings and meeting records: up to 24 months from the meeting date
- Server logs: typically 30 to 90 days, set by my hosting provider
- Client engagement records: as long as needed to fulfill the engagement, plus seven years to meet Canadian tax retention requirements
Your rights
Regardless of where you are, you can ask me to:
- Confirm whether I have information about you
- Access a copy of that information
- Correct it if it’s wrong
- Delete it
- Withdraw any consent you previously gave
To exercise any of these, email me at [email protected]. I will respond within 30 days, usually faster.
Quebec residents (Law 25)
In addition to the rights above, you have the right to be informed when your information is used to make an automated decision that affects you. I do not currently use automated decision-making on this site. If you are not satisfied with how I have handled your information, you may file a complaint with the Commission d’accès à l’information du Québec.
EU and UK residents (GDPR)
You also have the right to object to processing based on legitimate interest, the right to restrict processing, and the right to data portability. You can file a complaint with your local supervisory authority, including the UK Information Commissioner’s Office or your national data protection authority in the EU.
California residents (CCPA/CPRA)
You have the right to know what categories of personal information I collect, to delete it, to correct it, and to opt out of any sale or sharing of it. I do not sell or share personal information as those terms are defined under California law. If you would like to exercise any California-specific right, email me at [email protected].
Other Canadian residents (PIPEDA)
If you are unsatisfied with my response to a privacy request, you may file a complaint with the Office of the Privacy Commissioner of Canada.
How I protect your information
The site runs over HTTPS. Administrative access uses strong passwords and two-factor authentication. My hosting provider applies standard application and infrastructure security controls including firewall rules, malware scanning, and isolated environments. Third-party processors named above have their own published security practices.
No system is perfectly secure. If I become aware of an incident that affects your personal information, I will notify you in accordance with applicable law.
Children
This site is intended for a business audience. It is not directed at children under 13, and I do not knowingly collect information from them. If you believe a child has provided information through this site, contact me and I will delete it.
Changes to this policy
I will update this policy when my practices change, when I add or remove a provider, or when laws change. The current version is identified by the effective date at the top. For substantive changes, I will surface a notice on the site for at least 30 days.
Contact
Questions, requests, or complaints about this policy or your information can go to:
Yasser Soliman, Privacy Officer
Soliman Digital Inc.
Montreal, Quebec, Canada
Email: [email protected]