Privacy

Akram Aslam (“Akram”, “we”), operating Akram Aslam Photography at akramaslam.com (the “Site”), respects your privacy. This page explains what we collect, why, and the rights you have — under the EU/UK GDPR, Canada’s PIPEDA, and other applicable laws. The short version: the Site collects almost nothing, and only what you choose to send.

Who is responsible

Akram Aslam Photography — Oakville, Ontario, Canada. Privacy contact: privacy@akramaslam.com, or the contact form at the journey’s end.

What we collect, and why

We practise data minimisation — we only collect what we need.

• Your letter — the name, email address, and message you submit through the contact form. Why: to reply to you. Lawful basis: consent (you wrote to us). It is delivered to us and kept in our contact records (HubSpot CRM, once connected) on secured infrastructure.
• Server logs — our hosting provider (Vercel) keeps standard, short-lived technical logs (IP address, request path) to run and protect the Site. Lawful basis: legitimate interest.
• Your progress on the journey — which roads you have walked is remembered in your own browser’s storage. It never leaves your device and we never see it. See the cookie policy.

We use no analytics, no advertising, and no tracking pixels. We do not sell personal data, ever, and we do not profile you.

Who we share it with

• Vercel — website hosting and delivery.
• HubSpot — where contact enquiries are managed, so Akram can answer you.
• YouTube — only on the Music page, and only when you reach the moonlit screen: the player loads in YouTube’s privacy-enhanced mode (youtube-nocookie.com). Google’s privacy policy applies to what you play there.

International transfers

Some providers are based in the United States. Where your data leaves the EU/UK/Canada, we rely on appropriate safeguards such as Standard Contractual Clauses and the providers’ own compliance frameworks.

How long we keep it

Contact enquiries: up to 24 months after our last exchange, then deleted. Hosting logs: short-lived, per Vercel’s retention.

Your rights

Under GDPR (EU/UK): access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time — and the right to complain to your local supervisory authority. Under PIPEDA (Canada): access to and correction of your personal information, and complaint to the Office of the Privacy Commissioner of Canada.

To exercise any right, email privacy@akramaslam.com. We respond within 30 days.

Security

HTTPS everywhere, reputable providers, and tightly limited access. No method is perfectly secure, but we take your trust seriously.

Children

The Site is not directed at children under 16, and we do not knowingly collect their data.

Changes

If this policy changes, the date above changes with it, and material changes will be noted here.