Privacy

Akram Aslam (“Akram”, “we”), operating Akram Aslam Photography at akramaslam.com (the “Site”), respects your privacy. This page explains what we collect, why, and the rights you have — under the EU/UK GDPR, Canada’s PIPEDA, and other applicable laws. The short version: the Site collects almost nothing, and only what you choose to send.

Who is responsible

Akram Aslam Photography — Oakville, Ontario, Canada. Privacy contact: privacy@akramaslam.com, or the contact form at the journey’s end.

What we collect, and why

We practise data minimisation — we only collect what we need.

• Your letter — the name, email address, and message you submit through the contact form. Why: to reply to you. Lawful basis: consent (you wrote to us). It is delivered to us and kept in our contact records (HubSpot CRM) on secured infrastructure.
• Server logs — our hosting provider (Vercel) keeps standard, short-lived technical logs (IP address, request path) to run and protect the Site. Lawful basis: legitimate interest.
• Your progress on the journey — which roads you have walked is remembered in your own browser’s storage. It never leaves your device and we never see it. See the cookie policy.
• How the Site is used — we use Google Analytics 4 to understand, in aggregate, which pages are visited and how the journey is walked (pages viewed, approximate region, device type). It sets first-party cookies (see the cookie policy). We do not use it for advertising, and we do not connect it to your name or email. Lawful basis: legitimate interest in understanding and improving the Site.
• Your path to the letter— we also use HubSpot’s analytics (the same place contact enquiries are managed) to see how visitors find their way to the contact form. It sets first-party cookies (__hstc, hubspotutk, __hssc — see the cookie policy). Honestly: unlike our aggregate statistics, if you write to us these cookies let HubSpot connect your visits to your enquiry, so Akram can answer you in context. They are not used for advertising. Lawful basis: legitimate interest in understanding the Site and answering enquiries well.

We use no advertising and no ad-tracking pixels. We do not sell personal data, ever, and we do not profile you.

Who we share it with

• Vercel — website hosting and delivery.
• HubSpot — where contact enquiries are managed and where the analytics/lead-tracking cookies above are processed, so Akram can answer you, under HubSpot’s privacy policy.
• Google — Google Analytics 4 processes usage statistics on our behalf, under Google’s privacy policy.
• YouTube — only on the Music page, and only when you reach the moonlit screen: the player loads in YouTube’s privacy-enhanced mode (youtube-nocookie.com). Google’s privacy policy applies to what you play there.

International transfers

Some providers are based in the United States. Where your data leaves the EU/UK/Canada, we rely on appropriate safeguards such as Standard Contractual Clauses and the providers’ own compliance frameworks.

How long we keep it

Contact enquiries: up to 24 months after our last exchange, then deleted. Hosting logs: short-lived, per Vercel’s retention.

Your rights

Under GDPR (EU/UK): access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time — and the right to complain to your local supervisory authority. Under PIPEDA (Canada): access to and correction of your personal information, and complaint to the Office of the Privacy Commissioner of Canada.

To exercise any right, email privacy@akramaslam.com. We respond within 30 days.

Security

HTTPS everywhere, reputable providers, and tightly limited access. No method is perfectly secure, but we take your trust seriously.

Children

The Site is not directed at children under 16, and we do not knowingly collect their data.

Changes

If this policy changes, the date above changes with it, and material changes will be noted here.