Privacy Policy

1. Who is responsible for your data

The data controller for this website is Hasan Cagli, an independent founder based in Europe. If you have any question about this policy or want to exercise a right, you can reach us through the Contact Us page.

2. What we collect

We try to collect as little as possible. Depending on how you use the site, we may process:

• Contact details you give us — your email address when you reserve a free class seat, and your name, email and message when you fill in the contact form.
• Basic technical data — such as your browser type, device type, approximate region and the pages you view, collected in an aggregated, anonymous form for analytics.
• Cookie data — small files that help the site work, remember preferences and, where you consent, measure traffic. See our Cookie Policy for details.
• Correspondence — the content of messages you send us so we can reply and keep a record of your request.

We do not knowingly collect sensitive data such as health information, political opinions, religious beliefs or precise location, and we ask you not to send such information to us.

3. Why we use it (legal bases)

Under the GDPR we must have a lawful reason to use your data. We rely on the following:

• Consent — when you submit your email to reserve a seat or to receive class updates. You can withdraw consent at any time.
• Legitimate interests — to run, secure and improve the website, respond to enquiries and prevent abuse, balanced against your rights.
• Contract — where we need to deliver something you have asked for, such as access to a class you registered for.
• Legal obligation — where we must keep records or respond to lawful requests.

We use your email to send the class access link, essential updates about the class, and — only where you have opted in — the occasional newsletter about the build-in-public journey, new lessons and tool tips. You can unsubscribe at any time using the link in every email.

4. Who we share it with

We never sell or rent your personal data. We share it only with service providers who help us operate the site, and only to the extent necessary. These may include:

• An email and newsletter provider that delivers class links and updates.
• An analytics provider that gives us aggregated, anonymous traffic statistics.
• Hosting and infrastructure providers that keep the website online.
• A translation widget that helps visitors read the site in their own language.

Each provider processes data under its own terms and, where required, a data-processing agreement. Where the law requires it, we may also disclose data to public authorities.

5. International transfers

Some providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision, so that your data continues to receive a comparable level of protection.

6. How long we keep it

We keep personal data only as long as we need it for the purpose we collected it:

• Class reservations — until the class is over and any follow-up has been sent, then removed or anonymised unless you opted in to updates.
• Newsletter subscribers — until you unsubscribe.
• Contact messages — normally up to 24 months so we can follow up and keep a record of your request.
• Analytics — in an aggregated, non-identifying form.

7. Your rights

If you are in the EU or EEA, you have the right to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Erase data where there is no good reason for us to keep it.
• Restrict or object to certain processing.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, without affecting processing that already happened.
• Complain to your local data-protection authority.

To exercise any of these rights, email us via the Contact Us page. We will respond within the time required by law, usually within one month.

8. How we protect it

We use sensible technical and organisational measures to protect your data — encrypted connections, access controls, reputable providers and data minimisation. No system is perfectly secure, but we work to keep the risk low and to notify you and the relevant authorities if a breach affecting your rights ever occurs.

9. Children

This website is intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to this policy

We may update this policy as the website and its tools change. When we do, we will update the date at the top of the page. If the changes are significant, we will make that clear on the site.

11. Contact

Questions about privacy? Write to us through the Contact Us page and mark your message “Privacy”. We take every request seriously.