Privacy Policy

Waheed Zen LLC ("we", "us", "our") respects your privacy. This policy explains what personal information we collect, why, how we use it, who we share it with, and the rights you have.

Controller: Waheed Zen LLC, 1001 S Main St, Ste 500, Kalispell, MT 59901, United States. Contact: [email protected].

1. Information we collect

You give us:

• Name, business name, email address, phone number, and postal address
• Website URL and information about your business
• Payment and billing information (processed by our payment providers, see below)
• Content of messages, calls, and support requests
• Account credentials you choose to share with us for platforms we manage on your behalf
• Course and community account information, including progress data

Collected automatically:

• IP address, device type, browser type, operating system
• Pages viewed, referring URL, time on site
• Cookie and similar identifiers (see Cookie Policy)

From third parties:

• Analytics and advertising platforms (Google Analytics, Google Ads, Meta)
• Payment processors (transaction status, not full card numbers)
• Publicly available business information used in proposals and research

We do not knowingly collect information from anyone under 18.

2. Why we use it and our legal basis

3. Payment information

We do not store your full card number. Payments are processed by PCI-DSS compliant third party processors including Stripe and PayPal. Your card details are submitted directly to those providers under their own privacy policies. We receive only the transaction result, the last four digits, card brand, and billing contact information.

4. Who we share information with

We share personal information only with:

• Service providers and sub-processors listed on our Sub-processors page, which may include hosting, email, CRM, analytics, communications, community, and payment providers
• Advertising and analytics platforms where you have consented to those cookies
• Professional advisers such as accountants and lawyers, under confidentiality
• Authorities, where required by law, court order, or to protect our legal rights
• A successor entity, in the event of a merger, acquisition, or sale of assets, subject to this policy

We do not sell your personal information. We do not share your personal information for cross context behavioural advertising as those terms are defined under the California Consumer Privacy Act.

We do not sell, rent, or share mobile phone numbers or SMS consent with third parties or affiliates for their own marketing purposes. Consent to receive text messages from us is never shared.

5. International transfers

We operate internationally. Our team works from the United States and Pakistan, and our service providers may process data in the United States, the European Union, and elsewhere. Where we transfer personal data out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with appropriate supplementary measures.

6. How long we keep it

• Enquiry and lead records: 24 months from last contact
• Client records and contracts: duration of the engagement plus 7 years
• Course and community accounts: duration of access plus 24 months
• Financial and tax records: 7 years, as required by United States law
• Marketing consent records: until you withdraw consent, plus 3 years as proof of consent
• Website analytics: up to 26 months
• Call recordings: 12 months

7. Your rights

If you are in the EEA or the UK (GDPR): access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent at any time. You may also complain to your local supervisory authority.

If you are in California (CCPA/CPRA): the right to know, delete, correct, and opt out of sale or sharing (we do neither), the right to limit use of sensitive personal information, and the right not to be discriminated against for exercising these rights.

If you are in Virginia, Colorado, Connecticut, Utah, Texas, or another US state with a comprehensive privacy law: equivalent rights under your state's law.

To exercise any right, email [email protected] with your request. We verify your identity, then respond within 30 days (45 days for CCPA requests, extendable once with notice). There is no charge unless the request is manifestly unfounded or excessive.

8. Cookies and tracking

See our Cookie Policy. We use a consent banner. Non-essential cookies, including analytics and advertising cookies, are not set until you consent. You can change your choice at any time through the "Cookie settings" link in the footer.

9. Advertising partners

Third party vendors, including Google, may use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits. You may opt out of personalized advertising by visiting Google Ads Settings at https://www.google.com/settings/ads, or opt out of third party vendor cookies at https://www.aboutads.info/choices and https://optout.networkadvertising.org.

10. Security

We use HTTPS across the site, access controls, multi-factor authentication on business accounts, and encryption in transit. No system is perfectly secure. If a breach affects your personal information, we will notify you and any required authority within the timeframes the law requires.

11. Do Not Track

Our website does not currently respond to Do Not Track browser signals. We do honour the Global Privacy Control (GPC) signal as an opt out of sale or sharing where applicable law requires.

12. Changes

We will post any change here with a revised "Last updated" date. Material changes are notified by email to active clients at least 14 days in advance.

13. Contact

Waheed Zen LLC, 1001 S Main St, Ste 500, Kalispell, MT 59901, United States [email protected] | +1 (716) 356-9694