Privacy

Effective Date: August 1, 2026

Elevate With Karim (“we,” “us,” or “our”) operates the website elevatewithkarim.com (the “Site”) and provides digital marketing services to small businesses (the “Services”). This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit our Site, contact us, book a call, or otherwise engage with our Services, and it describes the rights available to you under the EU/UK General Data Protection Regulation (“GDPR”) and other applicable data protection laws.

This policy applies to visitors and clients regardless of location. If you are located in the European Economic Area (EEA) or the United Kingdom, the GDPR provisions in this policy apply directly to you. If you are located elsewhere, we nonetheless apply the same standards as a matter of good practice.

Data Controller

The data controller responsible for your personal data is:

Business name: Elevate With Karim
Contact email: karim@elevatewithkarim.com
Address: Hosni Mubarak Street, Zahraa Nasr City, Cairo, Egypt 

For any questions about this policy or your personal data, contact us using the details above.

What Personal Data We Collect

We collect the following categories of personal data:

Information You Provide Directly

  • Contact form submissions: name, email address, and any message content you submit.
  • Discovery call bookings (via Cal.com or similar scheduling tool): name, email address, and any details you provide when scheduling.
  • Email correspondence: your name, email address, and the content of any messages you send us.
  • Newsletter or marketing sign-up (only if and when you opt in): name and email address.

Information Collected Automatically

  • Usage data via analytics tools (e.g., Google Analytics): pages visited, time on page, referring site, approximate location (derived from IP address), device and browser type, and general navigation patterns.
  • Cookies and similar tracking technologies, as described in Section 6 below.

Information We Do Not Intentionally Collect

We do not knowingly collect special categories of personal data (e.g., health information, religious beliefs, racial or ethnic origin) and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

How and Why We Use Your Data (Legal Basis for Processing)

Under GDPR, we must have a valid legal basis for each use of personal data. The table below summarizes our purposes and the corresponding legal basis.

  • To respond to inquiries submitted via the contact form: Legal basis — Legitimate interest (responding to a request you initiated) / Consent (by submitting the form).
  • To schedule and conduct discovery calls: Legal basis — Contract (steps taken at your request prior to entering a service agreement) / Legitimate interest.
  • To provide, manage, and invoice our Services once engaged: Legal basis — Performance of a contract.
  • To send marketing emails or newsletters (only where you have opted in): Legal basis — Consent. You may withdraw this consent at any time (see Section 8).
  • To analyze and improve the Site (via analytics): Legal basis — Legitimate interest / Consent, depending on your cookie preferences (see Section 6).
  • To comply with legal obligations (e.g., tax, accounting, responding to lawful requests): Legal basis — Legal obligation.

We do not use your personal data for any purpose incompatible with the purposes listed above without notifying you and, where required, obtaining your consent.

How We Store and Protect Your Data

Storage

Personal data is stored using the infrastructure of our service providers (see Section 5), including our email provider, scheduling tool, and email marketing platform. We retain personal data only for as long as necessary for the purposes described in this policy, specifically:

  • Contact form and email correspondence: retained for up to 24 months from last contact, or longer if an ongoing client relationship exists.
  • Scheduling/booking data: retained in accordance with the scheduling provider’s own retention practices, and deleted from our own records once no longer needed for the purpose collected.
  • Newsletter/marketing data: retained until you unsubscribe or withdraw consent.
  • Client/contract data: retained for the duration of the business relationship and thereafter as required by applicable tax, accounting, or legal obligations (typically up to 5–7 years, depending on local law).

Security Measures

We take reasonable technical and organizational measures to protect your personal data, including:

  • Use of reputable third-party providers (see Section 5) that themselves maintain industry-standard security and their own GDPR compliance programs.
  • Restricting access to personal data to only what is necessary to operate the Site and provide the Services.
  • Use of secure, encrypted connections (HTTPS) for the Site.
  • Regular review of the tools and third parties we use to process personal data.

No method of transmission or storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security, and any transmission of data to us is at your own risk.

How We Share Your Data (Third Parties)

We do not sell your personal data. We share personal data only with the following categories of third parties, each acting as our data processor (or, in some cases, as an independent controller for their own platform operations):

  • Analytics provider (e.g., Google Analytics): processes usage data to help us understand Site performance. Google may process this data in the United States or other countries; where applicable, this transfer relies on Standard Contractual Clauses or another valid GDPR transfer mechanism. You can opt out via your cookie preferences (Section 6).
  • Scheduling provider (e.g., Cal.com): processes your name, email, and booking details to enable call scheduling and reminders.
  • Email marketing provider (e.g., Mailchimp): processes your name and email address to send newsletters or marketing communications, but only if and when you have opted in.
  • Email hosting provider: processes correspondence sent to our business email address.
  • Legal and regulatory authorities: we may disclose personal data if required to do so by law, regulation, legal process, or governmental request.

Each third-party provider is contractually or independently obligated to implement appropriate safeguards for personal data. Where a provider is located outside the EEA/UK, transfers are made only where an adequate legal transfer mechanism is in place (such as an adequacy decision or Standard Contractual Clauses).

Cookies and Tracking Technologies

Our Site uses cookies and similar technologies for the following purposes:

  • Strictly necessary cookies: required for the Site to function properly (e.g., security, basic navigation). These do not require consent.
  • Analytics cookies (e.g., Google Analytics): help us understand how visitors use the Site. These are only set with your consent, where required by applicable law.
  • Third-party embed cookies (e.g., from an embedded scheduling widget): may be set when you interact with an embedded booking tool.

Where required, we will present a cookie consent banner allowing you to accept or reject non-essential cookies before they are set, and to change your preferences at any time. You can also control cookies through your browser settings, though disabling cookies may affect Site functionality.

International Data Transfers

Because we use third-party providers that may process data outside your country of residence (including outside the EEA/UK), your personal data may be transferred internationally. Where this occurs, we ensure an appropriate safeguard is in place, such as: an adequacy decision by the European Commission, Standard Contractual Clauses (SCCs), or another legally recognized transfer mechanism.

Your Rights Under GDPR

If you are located in the EEA/UK (and, as a matter of practice, regardless of location), you have the following rights regarding your personal data:

  • Right of access: request a copy of the personal data we hold about you.
  • Right to rectification: request correction of inaccurate or incomplete personal data.
  • Right to erasure (‘right to be forgotten’): request deletion of your personal data, subject to certain legal exceptions.
  • Right to restrict processing: request that we limit how we use your personal data in certain circumstances.
  • Right to data portability: request your personal data in a structured, commonly used, machine-readable format.
  • Right to object: object to our processing of your personal data, including for direct marketing purposes.
  • Right to withdraw consent: where processing is based on consent (e.g., newsletter sign-up), withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
  • Right to lodge a complaint: lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data violates applicable law.

How to Exercise Your Rights

  • To exercise any of the above rights, contact us at karim@elevatewithkarim.com. We will respond to your request within one month, as required by GDPR (this period may be extended by up to two further months for complex requests, in which case we will notify you). We may need to verify your identity before fulfilling certain requests.

Marketing Communications

We will only send you marketing emails or newsletters if you have affirmatively opted in (e.g., by submitting a sign-up form). Every marketing email will include a clear way to unsubscribe. You may withdraw your consent at any time by clicking “unsubscribe” in any email or by contacting us directly at karim@elevatewithkarim.com. We do not currently operate a newsletter as of the effective date of this policy, but this section will apply automatically if and when one is introduced.

Children’s Privacy

Our Site and Services are intended for business owners and professionals and are not directed at children. We do not knowingly collect personal data from anyone under the age of 16. If we become aware that we have inadvertently collected such data, we will delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, tools, or legal requirements. The “Effective Date” at the top of this policy indicates when it was last revised. We encourage you to review this page periodically. Material changes will be reflected with an updated effective date, and where appropriate, we will provide additional notice.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Business: Elevate With Karim
Email: karim@elevatewithkarim.com
Address: Hosni Mubarak Street, Zahraa Nasr City, Cairo, Egypt 
Website: elevatewithkarim.com