Rashad Bayram
The fine print, in plain words

Privacy Policy

Last updated: August 24, 2026

This site (rashadbayram.com) is a personal blog and portfolio run by Rashad Bayram. The paid consulting offered on it is sold by Pinvity Inc., a GST registered Alberta corporation. This page explains, in plain language, what data the site collects, why, and the choices you have. The goal is to collect as little as possible, and your data is never sold.

What I collect, and why

  • Analytics (Google Analytics 4). To understand which articles people read and how they find the site, I use Google Analytics. It sets cookies and collects things like pages viewed, approximate location, device and browser type, and referring source. IP anonymization is enabled. On the /consulting page it also records a few interaction events, such as whether the booking calendar loaded, whether you reached the booking form, and whether a booking was completed, so I can tell where the page is failing people. When a booking completes, that event also includes Cal.com's booking reference, the event type, and the meeting start time. It carries no name or email, but the booking reference does correspond to a booking record held at Cal.com that identifies you, so I treat it as personal data and it is covered by the access and deletion rights below. The newsletter forms record a few events too: that a form was submitted, that the signup was accepted, and that a confirmation link was clicked. The first two also record which form on the site it was, such as the footer bar, an in-article form, or the waiting list on the Self-Guided Blueprint card; the confirmation event does not. Those events carry no name or email address. Because the confirmation event fires on the page you reach from the confirmation email, it can associate your analytics identifier with the fact that you subscribed, so I treat that as personal data too and it is covered by the same rights below. That page deliberately reports a cleaned-up address to Google, so your personal confirmation link is never sent. Otherwise this data is aggregated and used to decide what to write, apart from the advertising association described under cookies below. The one exception is described under booking a paid call below: if you book a call, the identifier carried on that booking lets me connect these earlier visits to you.
  • Session insights (Microsoft Clarity). To see how pages actually perform, for example whether a button is easy to find, I use Microsoft Clarity, which produces heatmaps and anonymized session replays of how visitors move through pages. Clarity masks text input and sensitive content by default, so it does not capture what you type. Microsoft may use this data in line with its privacy statement.
  • Email delivery (Resend). If you subscribe to the newsletter, I collect your email address to send updates. Subscription uses double opt-in (you confirm by email), and every email I send you as a subscriber includes an unsubscribe link. The waiting list on the Self-Guided Blueprint card is the same list and the same double opt-in, not a separate one: if you join it you are told so on the form before you type anything, and you receive one email the day that product is ready plus the same monthly letter, leaving from any of them. I am told which form an address came from, so I know who is owed the launch email. The confirmation email itself is the one exception, and deliberately so: at that point you are not subscribed to anything, so there is nothing to leave. Ignore it and nothing happens. Resend is the service that delivers those emails, and it also delivers the booking notification described below, so it processes booking details as well as newsletter addresses. A few automatic notifications also reach my own inbox. When someone enters an address in the form, I am told a confirmation was requested, but the address is partly hidden, because anyone can type another person's address into a form and it is not mine to hold until it is confirmed. When you click the confirmation link, I am sent your full address, since at that point you have chosen to join. I am also alerted when an email I send you cannot be delivered, or when someone marks one of my emails as spam. That alert tells me the address involved, the subject line, and for a failed delivery the reason it failed. I use it only to stop emailing that address and to keep delivery working. If the email in question was an unconfirmed subscription confirmation, the address is partly hidden there too, for the same reason as above. Marking an email as spam is always treated simply as a request to stop, never used to build a profile of you. All of these notifications go to me and to no one else.
  • Payments (Stripe). Stripe handles payment for the paid consulting on /consulting. For the seventy five minute call, payment is taken at the moment you book. For longer engagements, which are scoped privately rather than sold from the page, I send you a Stripe invoice in two parts, one to start and one on delivery, and you pay it from the hosted invoice page. Either way Stripe collects your card details, name, email and billing address directly. I never see or store your full card number. Stripe uses the billing address to work out whether Canadian sales tax applies, and it holds the transaction record for its own legal and anti-fraud obligations, as its own privacy policy describes. The consulting service is sold by Pinvity Inc., a GST registered Alberta corporation, and Pinvity Inc. is the merchant of record on your receipt and card statement.
  • Booking a paid call (Cal.com). You book the call on the /consulting page. The name, email, scheduling details (including whether a booking was cancelled, rescheduled or not attended) and the answers you give to the booking questions are processed by Cal.com to schedule the meeting and to apply the booking terms set out on /consulting. Those answers describe the decision you want help with and roughly how much money is at stake, so treat them as you would any other note about your business finances. The booking also carries four campaign fields you do not fill in: your Google Analytics identifier and the campaign origin described above (source, campaign, and landing page). I use them to tell which articles and campaigns lead to real conversations. They are stored on the booking record at Cal.com, are not used by me for advertising, and are covered by the access and deletion rights below. If you email me instead of booking, that message arrives as an ordinary email to my inbox, holding whatever you choose to write, and stays there until I delete it or you ask me to. Be aware of what the identifier does: it is the pseudonymous id from the analytics cookie on your device, and because it sits on a record that also holds your name and email, it lets me see which pages you read before you booked. I do not use it to identify you on any other site; what Google itself may do with the analytics cookie is described under advertising and cross-site cookies above. If you block analytics cookies the field simply arrives empty and your booking works exactly the same. When you book, an automatic notification is also sent to me by email through Resend, containing your name, email address, the meeting time and time zone, the campaign fields described above, and the Cal.com booking reference. It goes to my own inbox and to no one else.
  • Hosting and server logs (Vercel). The site is hosted on Vercel, which processes standard technical logs (such as IP address and request data) to serve and secure the site.

Cookies and browser storage

The site uses cookies for analytics (Google Analytics and Microsoft Clarity) and, as described next, for advertising. You can block or delete cookies in your browser settings at any time, and the site still works without them.

Advertising and cross-site cookies: Google Analytics is configured with Google Signals enabled. In plain terms, if you are signed into a Google account that has Ads Personalization switched on, Google may associate your visit here with that account. This is what lets me see general demographics and interest categories for my readers, and it means Google can build remarketing audiences from visits to this site. Google may set advertising cookies on its own domains, including doubleclick.net, to do it. I turned this on deliberately, because understanding who reads the site is how I decide what to write next.

Microsoft is in the same category, and it would be misleading to name only Google. Microsoft Clarity communicates with Microsoft's advertising domain (c.bing.com) and syncs an advertising identifier there, and Microsoft may use Clarity data in its own advertising, as described in its privacy statement linked below.

The site also uses your browser's storage for functional preferences. Your light or dark theme choice, and the fact that you completed a newsletter signup, are kept in local storage, so they survive after you close the tab. The site also keeps a short list of times in local storage recording when the newsletter pop-up was shown to you, so that it is shown at most three times in any thirty day period. Dismissing the newsletter bar, or having already seen the pop-up during this visit, is kept in session storage instead, so it lasts only for the current browsing session and is cleared when you close your browser. These stay on your device and are not sent anywhere.

Vercel, which hosts the site, may set a short-lived first-party cookie recording which version of the site served you. Its only job is to keep a page you already have open matching the files it was built with, so that a deployment made while you are reading does not leave the page without its styling. It contains no personal data, is not used for analytics or advertising, and is not shared with anyone.

One further item is stored locally: when you first arrive, the site records how you got here. That means any campaign tags in the link you followed, the hostname of the site that referred you (the address only, never the full link), the page you landed on, and the date and time it was recorded. It is written once on your first visit and not updated afterwards. That origin is then attached to the interaction events on the /consulting page described above, and, if you book a call, to your booking record at Cal.com, so I can tell which articles and campaigns actually help people. It contains no name, email, or other personal detail in itself. It is never sold, and it is shared with Cal.com when you book, and included in the booking notification email described above. Clearing your browser storage removes it.

What I do not do

  • Neither I nor Pinvity Inc. sells or rents your personal data.
  • I do not run my own ad network, and I do not serve ads on this site. Google's advertising infrastructure is involved though, through the Google Signals setting described under cookies above, so I am not going to claim I am outside it.
  • I do not upload your email address or name to any advertising platform, and I do not run Customer Match or any similar list upload. The only identifiers involved on the advertising side are the pseudonymous analytics cookie and the Microsoft advertising identifier, both described under cookies above.
  • I do not collect more than I need to run the site and its newsletter.

Your choices and rights

  • Opt out of analytics: use your browser's tracking protection or a content blocker, or block cookies. Google also offers an opt-out browser add-on.
  • Opt out of the advertising side specifically: turn off Ads Personalization in your Google account at My Ad Center. That stops Google associating this visit with your account, and it works across every site using Google Signals, not just mine.
  • Unsubscribe: click the unsubscribe link in any newsletter email.
  • Access or delete your data: email me and I will help. Depending on where you live (for example under the EU's GDPR or Canada's PIPEDA and CASL), you may have the right to access, correct, or delete your personal data, and to withdraw consent at any time. The one limit is the payment record for a paid consulting booking, which Pinvity Inc. keeps for seven years as described under data retention below. Everything else is deleted on request.

Third-party services

These providers process data on my behalf, and for the paid consulting bookings on Pinvity Inc.'s behalf. Their own privacy policies apply:

Data retention

Analytics data is retained according to the providers' default periods. Newsletter data is kept until you unsubscribe, and the notification emails described above stay in my mailbox until I delete them. If you asked to subscribe and never confirmed, no address is added to any list, and the only record is a notification showing a partly hidden address. If you unsubscribe or ask me to delete your data, I delete those notification emails too. Delivery and spam-complaint alerts stay in my mailbox until I delete them, and I delete them once the address has been removed from the list. Booking data is kept at Cal.com only as long as needed to manage the meeting. The booking notification email described above stays in my mailbox until I delete it. If you ask me to delete your booking, I delete that email, my copy of anything I sent you about the booking or the call, anything you sent me about it, and the Cal.com record. Resend keeps its own log of messages it delivered on my behalf, on its schedule rather than mine, and deleting my copy does not reach that. The payment record is the exception: Pinvity Inc. keeps the record of a paid consulting transaction for seven years, because Canadian tax and corporate records rules require transaction records to be kept, and that obligation overrides a deletion request for the transaction record itself. It is held by Pinvity Inc. and Stripe, not on this site. Everything else described here is still deleted on request.

Children

This site is not directed at children under 16, and I do not knowingly collect data from them.

Changes to this policy

I may update this policy as the site changes. The "last updated" date at the top will always reflect the current version.

Contact

Questions about privacy, or want your data accessed or deleted? Email info@rashadbayram.com. That address reaches both Rashad Bayram, for the site and the newsletter, and Pinvity Inc., which is accountable for the paid consulting bookings and the payment records described above.