Privacy Policy
Aklen Altinel ("I", "me", "my", or "aklen.net") is committed to protecting your privacy and managing personal data responsibly in compliance with the UK Data Protection Act 2018, the General Data Protection Regulation (UK/EU GDPR), and the Privacy and Electronic Communications Regulations (PECR).
1. Data Controller
The data controller for personal data collected through aklen.net is:
- Controller: Aklen Altinel
- Primary Contact Email: [email protected]
2. What Information Is Collected
Depending on your interaction with the Website, we collect:
- Advisory Booking Details: Name, work email address, company/fund affiliation, discussion agenda, and time preferences submitted through Cal.com.
- Payment Transaction Data: Processed directly via Stripe. We receive confirmation of completed payment, currency, amount, and Stripe Customer ID. Full credit or debit card numbers are processed directly on Stripe's PCI-DSS compliant vault and never touch our servers.
- Technical & Server Telemetry: Anonymized HTTP user-agent, IP address (truncated for geographic country derivation), and requested endpoints used to compile the public visitor spotlight (visitors.txt).
- Aggregated Analytics: Google Analytics 4 (GA4) measurement tags configured for cookieless or privacy-preserving event tracking.
3. Legal Basis for Processing
- Performance of a Contract (GDPR Art. 6(1)(b)): Processing your appointment details and payment to deliver the requested 30-minute advisory consultation.
- Legitimate Interests (GDPR Art. 6(1)(f)): Maintaining server security, bot prevention, and monitoring aggregate site traffic.
- Legal Compliance (GDPR Art. 6(1)(c)): Retaining statutory invoicing and accounting records required by UK tax authorities (HMRC).
4. Third-Party Service Providers
- Stripe Payments UK: PCI-DSS Level 1 certified gateway handling payment processing and chargeback administration.
- Cal.com: Scheduling engine handling appointment availability and meeting invitations.
- Google Meet: Secure video conferencing infrastructure for live consultation calls.
- Cloudflare: DNS routing, TLS 1.3 encryption, and DDoS edge protection.
5. Data Retention & Erasure
Consultation briefing notes and booking correspondences are retained for the duration of the advisory relationship and deleted upon request. Billing transaction logs are retained strictly for the statutory tax period required under UK law.
6. Your Statutory GDPR Rights
Under UK/EU GDPR, you have the right to:
- Request access to your personal data.
- Request correction of inaccurate personal data.
- Request erasure ("right to be forgotten") of your records.
- Object to or restrict data processing.
- Lodge a complaint with the UK Information Commissioner's Office (ICO).
7. Contact for Privacy Inquiries
To exercise any of your data protection rights, please contact:
- Email: [email protected]