Privacy Policy

The data controller is Ziad Darwich ("we", "us"), operating as an independent coaching practice. You can reach the controller at contact@ziaddarwich.com.

We only collect data you actively submit, plus minimal analytics needed to understand how the site is used.

• Sample training week form: your email address. Used to deliver the requested PDF and to follow up about coaching, until you unsubscribe.
• Contact form: your name, email, and the message you send. Used to reply to your enquiry and assess fit for coaching.
• Discovery call booking (Calendly): name, email, time zone, and any answers you provide on the booking form. Used to schedule and prepare the call.
• Analytics: aggregated, non-identifying usage data (pages viewed, referrer, device type, language). Used to improve the site. No advertising profiles are built.
• Cookies: only essential cookies by default. Analytics cookies are loaded only after you consent via the cookie banner.

We do not collect payment card details on this site, and we do not knowingly collect data from children under 16.

• Consent — for the sample plan email, the contact message, and non-essential analytics cookies.
• Legitimate interest — for replying to enquiries, preventing abuse of the forms, and basic site analytics where consent is not required.
• Contract — when you become a coaching client, to deliver the service you've signed up for.

• Lead and contact form submissions: up to 24 months from your last interaction, then deleted.
• Client records (once coaching begins): for the duration of the engagement plus 5 years for tax and professional record-keeping.
• Email marketing list: until you unsubscribe (one click in any email).
• Aggregated analytics: up to 26 months.

We use a short list of trusted processors. Each is bound by a Data Processing Agreement (DPA) or equivalent contractual terms.

• FormSubmit — receives contact and lead form submissions and forwards them to our inbox.
• Calendly — schedules discovery calls.
• Google Workspace — email hosting and correspondence.
• Google Analytics 4 — privacy-friendly site analytics, loaded only with your consent. IP addresses are anonymised.
• Lovable / Cloudflare — hosting and content delivery for this website.

Some of these providers are based in the United States. Where personal data is transferred outside the EEA/UK, transfers rely on the EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.

• HTTPS/TLS encryption in transit across the entire site.
• Access to your data is restricted to the controller and the listed processors.
• No selling, renting, or sharing with advertisers — ever.
• Incident response: if a breach affects your data, we will notify affected users and the relevant authority within 72 hours where required.

Under GDPR (and equivalent laws in the UK, Switzerland, and similar jurisdictions) you can:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Export your data in a portable format.
• Withdraw consent at any time.
• Object to processing based on legitimate interest.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email contact@ziaddarwich.com. We respond within 30 days.

Essential cookies keep the site working (e.g. remembering your cookie choice and language). Analytics cookies are only set after you click "Accept" on the cookie banner. You can change your choice anytime via the "Cookie settings" link in the footer.

We may update this policy as the site or our tools change. Material changes will be announced on this page with a new "Last updated" date. Continued use of the site after a change means you accept the updated policy.