سياسة الخصوصية

This policy explains what personal information hayssamalamine.com collects, why, who else sees it, and what you can ask us to do about it. It covers this website only. Advisory, coaching and training engagements are governed by the agreement signed for that work.

1. Who is responsible

Hayssam Al Amine and RPM Training Solutions (“we”, “us”) are the controller for the information described here, which means we decide why it is collected and what happens to it. For any question about this policy, or to exercise the rights in section 8, write to hayssam@rpm-consultancy.com.

2. What we collect

We collect three things, and nothing else.

What you type into a form

The contact form, the resource and guide download forms, the programme enrolment form, the course waitlist and the assistant’s callback form all write to the same record. Depending on which form you use, that record holds: your first and last name, email address, phone number and dialling code, organisation, job title, country, your message, whether you ticked the marketing consent box, the page you submitted from, and the language the site was in. Nothing on this site asks for information beyond that, and no field is collected that we do not use.

Assessments you complete

The diagnostics and assessments under Resources store your answers, the scores derived from them and the resulting band, so that the report can be produced and so we can see which assessments people finish. If you also submit the form at the end, the two are linked; if you abandon it, the answers are kept without anything identifying you attached.

Technical information, briefly

Our server sees your IP address on every request, as every web server does. We use it in memory to rate-limit form submissions and discard it immediately: it is never written to our database and never attached to your enquiry. If you accept analytics cookies, Google Analytics collects usage data as described in section 7 and in our Cookies Notice.

3. Why we use it, and on what basis

• To answer you. If you send an enquiry, book a call or request a resource, we use your details to reply and to send you what you asked for. The basis is performance of a contract, or steps taken at your request before entering one.
• To run the site and keep it working. Rate limiting, spam prevention and error diagnosis rest on our legitimate interest in a site that functions and is not abused.
• To sell and deliver books. Where you buy from the shop, your order and payment details are processed to fulfil the purchase and to meet the tax and accounting obligations that follow it.
• To measure how the site is used. Only with your consent, given through the cookie banner and withdrawable at any time.
• To send marketing. Only where you have ticked the box asking for it. You can withdraw that at any time, by replying to any message or writing to hayssam@rpm-consultancy.com.

We do not sell personal information, we do not share it for advertising, and we do not make automated decisions about you that produce legal or similarly significant effects.

4. The assistant on this site

The chat assistant answers from a knowledge base written for this site. Where a question needs more than that, the conversation is sent to Anthropic’s API to generate a reply; Anthropic processes it on our behalf and does not use it to train models. The conversation is also kept in your own browser so it survives a page reload, and clearing your browser storage removes it. Please do not type anything confidential into it. If you ask the assistant to arrange contact, the details you give it are stored as an ordinary enquiry under section 2.

5. Who else sees your information

We use a small number of providers, each for one job. We do not pass your information to anyone else.

• Namecheap hosts the site and the database in which enquiries are stored.
• Our email provider carries the notification sent to us when you submit a form, and our reply to you.
• Stripe processes payments for book purchases. Card details are entered directly into Stripe’s own payment form and never reach our server; we receive the order, the amount and whether it succeeded. See Stripe’s privacy policy.
• Calendly provides the booking scheduler. It is embedded in this site and loads only when you open it, so if you never open it nothing from Calendly runs. What you enter when booking goes to Calendly, which acts as an independent controller under its own privacy notice.
• Anthropic generates assistant replies, as described in section 4.
• Google Analytics measures site usage, only after you accept.
• YouTube and Instagram serve embedded videos and reels on the media pages. These load only on the pages that contain them. We use YouTube’s no-cookie player.
• Our CRM, where one is connected, receives a copy of your enquiry so it is not lost in an inbox.

We may also disclose information where the law requires it, or to establish or defend a legal claim.

6. Where your information goes, and for how long

The providers above operate internationally, so your information may be processed outside the country you are in, including in the United States and the European Union. Where that happens we rely on the transfer terms in each provider’s own data processing agreement, including the European Commission’s standard contractual clauses where they apply.

We keep information only as long as it is doing something:

• Enquiries and resource requests: 24 months after our last contact with you.
• Assessment answers and reports: 24 months from completion.
• Marketing consent and the record of it: until you withdraw it.
• Orders and payment records: seven years, because tax and accounting law requires it.

After that it is deleted. You can ask us to delete it sooner — see the next section.

7. Cookies and analytics

We set no analytics or marketing cookies unless you accept them. Until you answer the banner, and if you decline, Google Analytics is never loaded at all — the tag is not placed on the page rather than placed and asked to behave. If you accept and later change your mind, withdrawing consent on the Cookies Notice stops the measurement and deletes the cookies it set. The full list is in that notice.

8. Your rights

You can ask us for a copy of the information we hold about you; to correct it if it is wrong; to delete it; to restrict or object to how we use it; to receive it in a portable form; and to withdraw any consent you have given, without affecting what was done before you withdrew it.

Write to hayssam@rpm-consultancy.com. We will respond within 30 days. We may need to confirm who you are first, and we will not charge you for a reasonable request. If you are not satisfied with our answer you may complain to your national data protection authority; in the UAE, that is the UAE Data Office.

9. Keeping it safe

The site is served over HTTPS only. Database credentials and API keys are held in the server environment, never in the published code, and payment card details never reach our systems at all. Access to stored enquiries is limited to Hayssam Al Amine and the colleagues who need it to respond to you. No system is immune, and we do not claim otherwise; if a breach affects your information and is likely to put you at risk, we will tell you and the relevant authority.

10. Children

This site is intended for professional audiences. We do not knowingly collect information from anyone under 18. If you believe a child has sent us information, write to hayssam@rpm-consultancy.com and we will delete it.

11. Changes

When our practices change, this page changes with them, and the date above is updated. If a change materially affects how we use information you have already given us, we will tell you directly rather than rely on you noticing.

12. Contact

Hayssam Al Amine, RPM Training Solutions — hayssam@rpm-consultancy.com