Privacy Policy

1. Who I Am

My name is Yassine Ajallal, and I operate as an independent digital asset manager. I am the Data Controller for the business contact records and website data described in this policy. This policy is written to comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, and, for emails sent to US recipients, the CAN-SPAM Act.

2. What Information I Collect

I handle two groups of data:

a) People I contact (business contacts). Full name, business email address, professional job title, company name, and any reply or correspondence that you send me. I collect only non-sensitive business data needed to start a conversation about domain acquisition.

b) Visitors to this website. Technical signals such as IP address, browser type and bot-verification results, processed through Cloudflare to keep this site secure. This site uses Cloudflare Turnstile, including its invisible mode, to verify that visitors are human before allowing certain actions; Turnstile's own processing of your data is described in Cloudflare's Turnstile Privacy Addendum. If you write to me through the contact page or by email, I also receive the details and message content you choose to send.

3. Where Your Information Comes From

I do not buy email lists or use third-party data brokers. For business contacts, I identify executives individually from public sources such as company websites, corporate registries and enterprise directories. This means I obtain your data from a source other than you. Every first email I send states this and tells you how to object. For website visitors, the data comes directly from your browser or from what you send me.

4. Why I Use Your Data and My Lawful Basis

I use business contact data only to inform relevant company leadership that a strategic domain name may be available, and to respond to replies. My lawful basis is Legitimate Interests under GDPR Article 6(1)(f) (and the equivalent UK GDPR provision). I have weighed this interest against your rights: the data is limited to business details, the outreach is relevant to your company or brand, it is low in frequency, and you can object at any time.

A business email address such as name@company.com is still personal data, so I treat it as protected in the same way as any other personal data. Where local law requires prior consent for unsolicited business emails, I do not send outreach to recipients in that country unless the required consent exists.

Website security data is processed on the basis of my legitimate interest in protecting this site from abuse. I do not use your data for automated decision-making or profiling.

5. Who Receives Your Data

I do not sell or rent your data. It may be handled by service providers that act on my behalf, such as my email provider and Cloudflare for website security. These providers may process data outside the EU/UK, including in the United States. Where this happens, I rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision. I may also disclose data if the law requires it.

6. How Long I Keep Your Data

Business contact records are kept for up to 24 months after our last interaction, then deleted. If we have an active conversation or transaction, I keep the records for as long as needed for it and for legal or accounting obligations. Security logs are kept for a short period set by Cloudflare. The only exception is the suppression record described in section 8.

7. Your Rights

Under the GDPR and UK GDPR you have the right to:

• access the personal data I hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict how I use your data;
• object to processing based on legitimate interests, which I will honour for direct marketing without exception;
• receive your data in a portable format where applicable.

To use any of these rights, email yassine@ajallal.com. I will reply within one month. You also have the right to complain to your local data protection supervisory authority, such as the one in the EU country where you live or work, or the UK Information Commissioner's Office.

8. How to Opt Out

You can stop all correspondence at any time by replying to any email with the word "Unsubscribe", or by emailing yassine@ajallal.com. I will stop contacting you promptly and no later than 10 business days.

When you unsubscribe or ask for deletion, I delete your data except for your email address, which I keep on a suppression list. I keep it solely so that I do not contact you again, which is a legitimate interest and a legal requirement under CAN-SPAM. No other data is kept for this purpose.

9. Contact

For questions about this policy or to exercise your rights, contact Yassine Ajallal at yassine@ajallal.com. My mailing address is shown in the footer of this page. I may update this policy from time to time, and the date below always shows the latest version.