The short version: this site runs no analytics and sets no tracking cookies. I don't know who you are unless you tell me — by joining a list, downloading a guide, buying something, or emailing me. Here's exactly what happens to your details when you do.
Who's responsible for your data
This site is run by Arfah Farooq, the data controller for everything described here. If you want your data changed or deleted, or you just want to know what I hold, email hello@arfahfarooq.com and I'll deal with it myself.
Cookies and tracking
There is no Google Analytics on this site. No Meta pixel, no TikTok pixel, no LinkedIn insight tag, no heatmaps, no session recording, no advertising trackers of any kind. I don't set cookies and the site doesn't store anything in your browser.
That's why you'll never see a cookie banner here. There's nothing to consent to.
Two things do load from outside this site:
- Google Fonts — the typefaces are served by Google, which means Google sees your IP address when a page loads. No cookies are set.
- YouTube videos on the press, speaking and Inclusive Tech World pages. These use YouTube's privacy-enhanced mode, so YouTube doesn't store cookies or build a profile of you unless you actually press play. If you do play a video, YouTube's own privacy policy takes over.
Links out to Cal.com, Substack, Instagram, LinkedIn, TikTok and anywhere else are ordinary links. Once you click, you're on their site under their rules, not mine.
What I collect, and why
When you join a waitlist or fill in a form on this site
I collect your name and email address, plus whatever else that particular form asks — usually your biggest blocker or what you want help with, so I can build something that's actually useful and not send you irrelevant emails.
This goes into my Airtable base and my email list in MailerLite, so I can email you about the thing you signed up for.
Lawful basis: your consent, given when you submit the form.
When you download a free guide
I collect your email address and add it to the relevant list in MailerLite, so I can send you the guide and follow up with related things.
Lawful basis: your consent.
When you buy something
For paid programmes I collect your name, email, your experience level, what you want help with, and your social handle if you give it. Payment is handled end to end by Stripe — your card details go straight to Stripe and never touch this site or any system of mine. I only ever see your name, email and the fact that you paid.
Your details are added to my purchaser list in MailerLite so I can deliver what you bought and support you through it. If you start a checkout but don't finish, your details sit in a separate list and I may email you once about it.
Lawful basis: performance of a contract, plus legitimate interests for the follow-up.
When you email me
I keep the email so I can reply and follow up. Nothing more.
Lawful basis: legitimate interests.
Server logs
This site is hosted on Netlify, which keeps standard access logs — IP address, browser type, pages requested — for security and to keep the site running. I don't use these for analytics and don't build any picture of individual visitors from them.
Lawful basis: legitimate interests in keeping the site secure and working.
Who else touches your data
I use a small number of trusted providers to run this. They process your data on my instructions and can't use it for their own purposes:
- Netlify — hosting and the forms behind them
- Airtable — where waitlist signups are stored
- MailerLite — my email list and the emails I send
- Stripe — payments
- Google — fonts only
- YouTube — embedded videos only, and only once you press play
I don't sell your data. I don't rent it, trade it, or hand it to advertisers. Ever.
Some of these providers are based in or store data in the United States. Where that happens, the transfer is covered by the safeguards in their own data processing terms, such as the UK addendum to the EU Standard Contractual Clauses or the UK extension to the EU–US Data Privacy Framework.
How long I keep it
- Email list: until you unsubscribe, or until you've been inactive for two years and I clean the list.
- Purchase records: six years, because HMRC requires it.
- Emails you send me: up to two years after our last exchange.
- Server logs: as long as Netlify keeps them, typically 30 days.
Your rights
Under UK GDPR you can ask me to show you what I hold, correct it, delete it, restrict what I do with it, hand it over in a portable format, or object to me using it. You can also withdraw consent at any time — every email I send has an unsubscribe link at the bottom, and one click is enough.
Email hello@arfahfarooq.com and I'll respond within one month. There's no charge.
If you're not happy with how I've handled it, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. I'd rather you came to me first so I can fix it.
Children
This site is for adults. I don't knowingly collect data from anyone under 13. If you think I have, email me and I'll delete it.
Changes to this policy
If I add anything to the site that changes what's collected, I'll update this page and change the date at the top. This version is dated 3 September 2026.