Privacy Policy

Effective Date: April 21, 2026
Last Updated: April 27, 2026

1. Data Controller & Contact Information

Company: Find Islam Path
Operating Entity: Alex Media company
Owner: Mohamed Tantawy
Email: [email protected]
Jurisdiction: Global (Egypt-based, serving international customers)

For privacy inquiries, data access requests, or to exercise your rights:
Email: [email protected]
Response Time: 30 days (GDPR/CCPA requirement)

2. What Information We Collect

A. Information You Provide Directly

Identity Data:

  • Full name

  • Email address

  • Phone number (optional, for coaching/consultancy)

  • Country/location

Transaction Data:

  • Purchase history and order records

  • Payment method (name, billing address, last 4 digits of card)

  • Refund requests and dispute information

  • Invoice records

Communication Data:

  • Messages sent through contact forms

  • Support tickets and inquiries

  • Feedback, reviews, and testimonials

  • Email correspondence with our team

Account Data:

  • Username and password (hashed)

  • Membership tier and access level

  • Course progress and completion records

  • Community forum activity (if applicable)

  • Coaching session notes (if applicable)

Profile Data:

  • Background and experience level (for personalization)

  • Learning goals and preferences

  • Language preference

  • Marketing preferences and consent status

B. Automated Data Collection

Cookies & Pixels:

  • Google Analytics: Tracks page views, session duration, user flow, traffic source

  • Facebook Pixel: Measures ad performance, builds audience segments, tracks conversions

  • Third-party analytics: Heatmaps, session recordings (optional, user consent required)

Technical Data:

  • IP address

  • Browser type and version

  • Device type (mobile, tablet, desktop)

  • Operating system

  • Pages visited and time spent

  • Clicks and interactions

  • Referral source (how you found us)

  • Error logs

Location Data:

  • General location (country/region, inferred from IP address)

  • NOT precise GPS location (unless voluntarily provided)

Behavioral Data:

  • Email opens and click-through rates

  • Purchase patterns

  • Course completion rates

  • Engagement with newsletters and content

3. Legal Basis for Processing Your Data

We process your information based on:

Basis What Data Why Contract Payment, account, course access Delivering products/services you purchased Consent Non-essential cookies, marketing emails You explicitly opted-in Legitimate Interest Analytics, fraud detection, site improvement Protecting our business and improving service Legal Obligation Transaction records, tax data Compliance with financial/tax laws Vital Interest Fraud data, security Preventing harm and protecting users

4. Cookies & Tracking Technologies

Essential Cookies (No Consent Required)

These are necessary for the website to function:

  • Session IDs (keeping you logged in)

  • Security tokens (CSRF protection)

  • Payment processing (PayPal/Stripe)

  • Preference storage (language, currency)

  • Duration: Session-based or 1 year

Performance Cookies (Consent Required)

These help us understand how users interact with our site:

Targeting/Marketing Cookies (Consent Required)

These allow third parties to serve relevant ads:

Third-Party Cookies

Partners set their own cookies on our site:

  • Google Ads (retargeting)

  • LinkedIn Insight Tag (B2B analytics)

  • Email service provider (mailchimp/ConvertKit tracking)

How to Manage Cookies:

  1. Browser settings: chrome://settings/content/cookies, firefox.com preferences

  2. Cookie banner: Accept/Decline/Settings on first visit

  3. Opt-out tools: https://optout.aboutads.info, https://youronlinechoices.com

  4. Do Not Track: Enable in your browser (we honor DNT signals)

5. How We Use Your Data

Purpose Data Used Legal Basis Process payments Payment, name, email Contract Deliver products/services Account, course data Contract Send confirmations & receipts Email, transaction data Contract Provide customer support All communication data Contract Improve site & products Analytics, behavioral data Legitimate interest Personalize your experience Profile, behavioral data Consent/Legitimate interest Marketing communications Email, name, interests Consent Fraud prevention All data Legal obligation/Vital interest Legal compliance All data Legal obligation Service announcements Email Contract Retargeting ads Pixel data, browsing history Consent

6. Third-Party Data Processors

We share your data with the following vendors (Data Processing Agreements in place):

Vendor Purpose Data Shared Privacy Policy PayPal/Stripe Payment processing Name, email, payment info paypal.com/privacy, stripe.com/privacy Email Provider (ConvertKit/MailChimp) Newsletter delivery, marketing Email, name, engagement data convertkit.com/privacy, mailchimp.com/privacy Google Analytics Site traffic analysis IP, behavior, technical data analytics.google.com/analytics/learn/privacy Facebook Pixel Advertising, audience building IP, browsing, purchase data facebook.com/privacy Web Hosting (AWS/Vercel) Data storage, site hosting All data aws.amazon.com/privacy, vercel.com/privacy CRM (HubSpot/Pipedrive) Sales and customer management Contact, transaction data hubspot.com/privacy, pipedrive.com/privacy SMS Service (if used) SMS notifications Phone, name, message content vendor's privacy policy

Data Location: Your data may be stored in the US, EU, or other regions depending on vendor infrastructure. We ensure Standard Contractual Clauses (SCCs) are in place for international transfers.

7. Data Retention Policy

We keep your data only as long as necessary:

Data Type Retention Period Reason Account & transaction 7 years Tax/financial compliance Payment records 7 years Audit and chargeback defense Email subscribers Until unsubscribe + 30 days Compliance + reactivation period Course access logs 3 years Service support and disputes Coaching session notes 3 years Dispute resolution Refund requests 3 years Fraud prevention, disputes Support tickets 2 years Reference and support history Analytics data 14 months Google Analytics default Marketing cookies 90 days Ad targeting IP logs 30 days Security monitoring

Deletion Request: If you request deletion, we'll erase data within 30 days unless legal obligation requires retention.

8. Your Privacy Rights

A. GDPR Rights (EU/UK Users)

You have the right to:

  1. Access – Request a copy of all data we hold about you (free)

  2. Rectification – Correct inaccurate or incomplete information

  3. Erasure ("Right to be Forgotten") – Request deletion of your data

  4. Restrict Processing – Ask us to stop using your data for specific purposes

  5. Data Portability – Export your data in machine-readable format (CSV, JSON)

  6. Object to Processing – Opt-out of marketing, analytics, profiling

  7. Withdraw Consent – Unsubscribe from marketing anytime (link in every email)

  8. Lodge a Complaint – File a complaint with your local data protection authority

To Exercise Rights: Email [email protected] with your request

B. CCPA Rights (California Residents Only)

California residents (Cal. Civil Code § 1798.100 et seq.) have the right to:

  1. Know – What personal information we collect, use, and share

  2. Delete – Request deletion of personal information we've collected

  3. Opt-Out of Sale – We do not sell personal information; however, targeted advertising may constitute a "sale" under CCPA

  4. Non-Discrimination – We will not discriminate against you for exercising CCPA rights

  5. Access & Portability – Request your data in portable format

Specific CCPA Disclosures:

  • Categories of personal info collected: Identifiers, commercial info, internet activity, geolocation, professional info

  • Business purposes: Fulfilling transactions, customer service, marketing, fraud prevention, analytics

  • Categories of third parties: Service providers, marketing partners, affiliates, payment processors

  • Data sold/shared: We do not sell data for money, but third-party pixels may constitute "sharing" for behavioral advertising

  • Retention: 7 years for transaction data; see Section 7 for other categories

To Exercise CCPA Rights: Email [email protected] with "CCPA Request" in subject line. Include your name and email. Response within 45 days.

C. LGPD Rights (Brazil Residents)

Brazilian residents have similar rights to GDPR under LGPD (Lei Geral de Proteção de Dados). Contact us for exercise of rights.

D. Other Jurisdictions

Additional privacy rights may apply in your country. Contact us to understand your rights.

9. International Data Transfers

We operate globally and may transfer your data outside your country of residence:

  • Within US/EU: Data storage on AWS and Google servers

  • Standard Contractual Clauses (SCCs): Ensure adequate data protection for international transfers

  • Your Consent: By using our site, you consent to data processing in any country

For EU Users: We ensure transfers comply with GDPR Chapter 5 requirements.

10. Children's Privacy

Our services are NOT directed to anyone under 18 years old. We do not knowingly collect data from minors.

If you are under 18: Please do not use our site. If you are a parent/guardian and believe we've collected data from your child, contact us immediately at [email protected], and we will delete the information within 30 days.

11. Security Measures

We implement technical and organizational safeguards to protect your data:

  • SSL/TLS encryption for data in transit (HTTPS)

  • Hashed passwords (never stored in plain text)

  • Secure payment processing via PCI-DSS compliant PayPal/Stripe

  • Access controls (only authorized staff access data)

  • Regular security audits and penetration testing

  • Firewalls and intrusion detection systems

Important: No online system is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security.

12. Data Breach Notification

In the event of a data breach affecting your information:

  • We will notify you within 72 hours (GDPR requirement)

  • We will notify relevant data protection authorities

  • We will provide details about the breach and mitigation steps

  • We will offer credit monitoring if financial data is compromised

How we'll notify you: Email to the address on file

13. Third-Party Links & Services

Our site may contain links to third-party websites and services. This Privacy Policy does NOT apply to:

  • External websites

  • Third-party apps or plugins

  • Social media platforms

We are not responsible for their privacy practices. Review their privacy policies before sharing information.

14. California "Shine the Light" Law

Under California Civil Code § 1798.83, California residents may request disclosure of third parties with whom we share information for their direct marketing purposes. We do not share personal data with third parties for their marketing. To verify, contact [email protected].

15. Changes to This Privacy Policy

We may update this policy to reflect:

  • Changes in our practices

  • Legal or regulatory changes

  • Feedback from users

Notification of Changes:

  • Updated date will appear at the top

  • Material changes will be notified via email (if you're a customer)

  • Your continued use constitutes acceptance of the updated policy

16. Contact & Data Protection Officer

For Privacy Questions: Email: [email protected]
Response time: 30 days

Data Protection Officer / Privacy Lead: Name: Mohamed Tantawy
Email: [email protected]

For Complaints:

End of Privacy Policy

CCPA Notice & California Consumer Rights

For California Residents Only

Effective Date: April 21, 2026
Last Updated: April 27, 2026

1. Important Notice for California Residents

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). This page describes your rights and how to exercise them.

Applies to: California residents (defined by California law)

Does not apply to: Non-California residents (see Privacy Policy for your rights)

2. What Information We Collect

Under CCPA, "personal information" includes information that identifies, relates to, describes, or could reasonably be linked with a particular consumer or household.

Categories of Personal Information We Collect

Category Examples Collected? Identifiers Name, email, phone, IP address ✅ Yes Commercial Information Purchase history, transaction records, products purchased ✅ Yes Biometric Information None (we don't collect fingerprints, facial scans, etc.) ❌ No Internet Activity Browsing history, search history, cookies, clickstream data ✅ Yes Geolocation Data Country/region from IP address (not precise GPS) ✅ Yes Sensory Information Audio/video recordings (only if you submit them) ⚠️ Limited Professional Information Background, experience, job title (if provided in profile) ⚠️ Limited Education Information Educational background, learning interests ⚠️ Limited Inferences Profile/preferences, interests, behavior patterns ✅ Yes Health Information None (unless voluntarily shared) ❌ No Genetic Information None ❌ No Children's Information None (we don't knowingly collect from <18) ❌ No

3. How We Use Your Information

Business Purposes (Why We Use Your Data)

We use your personal information for these business purposes:

  1. Fulfilling Requests: Process your purchases, deliver products/services, send confirmations

  2. Service Improvement: Understand how you use our site, identify issues, improve functionality

  3. Marketing: Send promotional emails, targeted ads, newsletters (with your consent)

  4. Security & Fraud Prevention: Detect and prevent fraud, protect accounts, ensure safety

  5. Legal Compliance: Meet tax obligations, respond to legal requests, enforce agreements

  6. Analytics: Understand user behavior, measure campaign effectiveness, optimize content

  7. Customer Service: Respond to inquiries, resolve issues, provide support

  8. Personalization: Customize your experience, recommend products

  9. Debugging: Fix technical issues, improve performance

  10. Compliance with Law: Meet state and federal requirements

NOT Sold for Money

We do NOT sell your personal information for money.

May Constitute "Sale" or "Sharing"

However, these practices may constitute a "sale" or "sharing" under CCPA:

  • Third-party advertising cookies (Facebook Pixel, Google Ads) that collect browsing data and build audience segments

  • Analytics cookies that share aggregated, anonymized data with Google Analytics

  • These enable third parties to serve you targeted ads across the web

4. Your CCPA Rights

You have the right to:

1. Right to Know (Access)

You can request:

  • What personal information we collected about you

  • Categories of sources we collected it from

  • Business purposes for collection

  • Categories of third parties we share it with

How to exercise: Email [email protected] with subject "CCPA: Right to Know Request"

Timeline: Respond within 45 days (may extend 45 more days with notice)

Format: We'll provide information in portable, easily-understandable format (CSV, PDF, etc.)

2. Right to Delete

You can request deletion of personal information we've collected from you.

Limitations: We may NOT delete information if:

  • Needed to complete transaction

  • Required by law

  • Used for security/fraud prevention

  • Reasonably necessary for internal purposes

  • Needed with your consent

How to exercise: Email [email protected] with subject "CCPA: Deletion Request"

Timeline: Respond within 45 days

3. Right to Correct

You can request correction of inaccurate personal information.

How to exercise: Email [email protected] with subject "CCPA: Correction Request" including:

  • What information is inaccurate

  • What the correct information is

  • Evidence supporting the correction

Timeline: Respond within 45 days

4. Right to Opt-Out of "Sale" or "Sharing"

You can opt-out of having your personal information shared with third parties for cross-context behavioral advertising.

What this affects:

  • Facebook Pixel for targeted ads

  • Google Ads for retargeting

  • LinkedIn Insight Tag (if used)

  • Third-party cookies

What this doesn't affect:

  • Necessary cookies (login, security, payment)

  • Analytics (Google Analytics, traffic measurement)

  • Internal marketing

How to opt-out:

Option 1 (Recommended): Submit "Do Not Sell or Share My Personal Information" request

Option 2: Global Opt-Out Signal (DNSMPI)

  • Enable "Global Opt-Out Preference Signal" in your browser

  • We honor these signals and will not sell/share your data

Option 3: Third-Party Opt-Out Tools

Timeline: Opt-out effective within 15 days

5. Right to Limit Use & Disclosure

You can limit how we use sensitive personal information (if we collect it).

Sensitive Information: Financial account info, social security numbers, precise geolocation, race/ethnicity, health/genetic data, biometric data

Current Status: We do not collect sensitive information, so this right is not currently applicable.

6. Right to Non-Discrimination

You have the right to not be discriminated against for exercising CCPA rights.

We will NOT:

  • Deny goods or services

  • Charge different prices

  • Provide different service quality

  • Suggest different treatment

Exceptions: We may offer financial incentives for data collection (clearly disclosed).

7. Right to Know About Third-Party Sharing

You can request:

  • List of third parties we've shared your personal information with

  • Business purpose for each disclosure

5. How to Exercise Your CCPA Rights

Submit a Request

Email: [email protected]

Include:

  • Your full name

  • Email address used for account

  • Type of request (Know, Delete, Correct, Opt-Out, Limit)

  • Specific details about your request

  • Whether you want digital, email, or mail delivery

Verification

We may ask you to verify your identity before responding:

  • Match information in your account

  • Verify email address

  • Answer security questions

Why? To protect your privacy and prevent unauthorized access.

Authorized Agents

You can appoint an authorized agent to submit requests on your behalf:

  • We'll need proof of authorization (power of attorney, etc.)

  • Your agent should submit requests with your details

6. Children's Privacy (Under 16)

We Don't Collect Children's Data

Find Islam Path does not knowingly collect personal information from children under 16.

If You Are Under 16

  • Do not create an account

  • Do not make purchases

  • Do not share personal information

  • Have a parent/guardian use our site

If You're a Parent/Guardian

If your child under 16 has an account or provided information:

7. Shine the Light Law (CA Civil Code 1798.83)

Third-Party Information Sharing

Under California's "Shine the Light" law, you can request disclosure of third parties with whom we share personal information for their direct marketing.

Current Status: We do NOT share personal information with third parties for their marketing purposes.

To Verify: Email [email protected] with subject "Shine the Light Request"

8. Eraser Law (SB 568)

Request for Deletion (Additional Rights)

California's "Eraser Law" gives additional rights to delete information shared in connection with your use of online services.

How to request: Email [email protected] with subject "Eraser Law Request"

9. Online Privacy Protection Act Compliance

Parental Consent for Marketing

For users under 13, we:

  • Obtain verifiable parental consent before collecting personal information

  • Use information only for purposes related to the service

  • Allow parents to access and delete a child's information

10. Categories of Third Parties We Share With

We share personal information with:

Third Party Category Purpose Data Shared PayPal/Stripe Payment processor Process payments Name, email, transaction data Email service (ConvertKit) Communication vendor Send emails, newsletters Email, name, engagement data Google Analytics Analytics provider Measure traffic IP, behavior, session data Facebook Pixel Advertising Targeted ads, retargeting IP, ID, browsing history Web Host (AWS/Vercel) Infrastructure Store data, host site All data (encrypted) CRM software (HubSpot) Sales/support Manage customers Contact, transaction data

See Privacy Policy for complete list.

11. Data Retention

We retain your personal information:

  • Account data: 7 years (tax/legal requirement)

  • Email subscribers: Until unsubscribe + 30 days

  • Course access: 3 years (support reference)

  • Payment records: 7 years (audit requirement)

  • Analytics cookies: 14 months (Google default)

See Privacy Policy for details.

12. California Consumer Rights Summary

Your Rights at a Glance

Right Description Timeline Cost Know Access your personal data 45 days Free Delete Request deletion of data 45 days Free Correct Request data correction 45 days Free Opt-Out Opt out of "sale" or "sharing" 15 days Free Limit Limit use of sensitive data 45 days Free Non-Discrim. No discrimination for exercising rights N/A Free

13. Contact for CCPA Requests

Email: [email protected]

Subject line: "CCPA Request: [Know/Delete/Correct/Opt-Out]"

Response time: 45 days (may extend another 45 days)

Verification: We may ask for identity verification

14. Additional Privacy Information

For Complete Privacy Policy

See Privacy Policy for comprehensive privacy information including GDPR rights (if applicable).

For Questions

Email: [email protected]

15. California Attorney General Contact

If you believe we've violated your CCPA rights:

California Attorney General

  • Website: https://oag.ca.gov

  • Phone: (916) 322-3360

  • Address: 1300 I Street, Suite 1101, Sacramento, CA 95814

You also have the right to file a complaint with the California Attorney General.

16. Changes to This Notice

We may update this notice to reflect:

  • Changes in our practices

  • Changes in California law

  • Feedback from users

Updates effective: When posted (no advance notice required)

End of CCPA Notice & California Consumer Rights