Privacy, sales terms & disclaimer.

This is my personal website. The opinions, projects, and writing here are my own and do not represent any organisation.

I draw on public sources and my own personal experiments. This site contains no confidential organisational material.

The courses, projects, writing, and digital products here are educational and operational planning materials. They are not legal, regulatory, compliance, audit, financial or investment advice, and they do not create any professional relationship between us.

Some of what I write touches on governance and regulatory frameworks. Those frameworks change, they differ by jurisdiction, and your situation is not mine. If you are making a decision that carries real consequences, talk to someone qualified who knows your circumstances.

My courses ask you to install software, run commands and publish things to the internet. I have tested what I describe, but I cannot test it on your machine, your account or your network, and tools change after I write about them.

Read what you are about to run before you run it. That is genuinely good practice rather than a formality, and it is a habit I teach in the courses themselves. Everything here is offered as is, with no warranty, and you are responsible for what you choose to do on your own systems and accounts.

I do not add analytics, advertising trackers, or profiling to ordinary reading. The exceptions are the newsletter and a purchase you choose to make, both covered below. To be specific:

• No analytics of any kind, and no tracking pixels
• No cookies. The one thing kept in your browser is a note that you have already seen the newsletter box, so it does not ask you twice. It stays on your device and is never sent anywhere
• One form on this site, for the newsletter. Nothing is sent anywhere unless you type your address and submit it
• No advertising and no sale of personal information
• No third party requests while you read ordinary pages. Fonts are served from this site rather than loaded from Google. Choosing the purchase button takes you to Stripe, under the purchase terms below

There is no consent banner here because there is nothing to consent to. If that ever changes, so will this page.

This site is hosted by Vercel. Like every web host, their servers record standard technical information when a page is requested, which typically includes your IP address, the page you asked for, the time, and your browser type. That happens for delivery, security, and to keep the site running, and it is the only personal information involved in an ordinary visit. I do not use it to build a profile of you and I do not combine it with anything else.

Where that data sits matters, so I will be specific. Vercel serves this site from a global network, and requests from Canada are usually handled close by, but Vercel is a company based in the United States and technical log data may be stored or processed outside Canada. While it is outside the country it is subject to the laws of wherever it sits, which can include lawful access by foreign courts and government agencies. That is true of most of the web, and I would rather say it than leave you to assume otherwise.

My email address is published on this page and on the About page. If you write to me, I will have whatever you send: your address, your name if you give it, and the content of your message. I use it to reply to you and for nothing else. Writing to me will never put you on the newsletter — that only happens if you sign up and confirm it yourself — and I will not pass your message on.

Email is not a secure channel. Please do not send me anything confidential, and particularly not anything belonging to your organisation or anyone whose information you are responsible for.

There is now a newsletter. You are only on it if you asked to be, twice: once by entering your address, and once by clicking the confirmation link I email you. Until you click that link nothing is stored, which is what Canada's anti spam legislation means by express consent.

All I hold is your email address, which signup placement you used, and the date you confirmed. No name, and nothing I have inferred about you.

The list runs on Brevo, a French company, so your address sits on their servers under the GDPR and they process it only on my instructions.

Every newsletter email after confirmation carries a working unsubscribe link, and unsubscribing is immediate. If you would rather be deleted outright than merely unsubscribed, email me and I will remove you. I will not import addresses from people who emailed me, and I will not pass the list to anyone.

The AI Product Launch Execution Kit is a one-time digital purchase priced in Canadian dollars. The purchase button opens a Stripe-hosted checkout. Stripe collects the email, payment method, billing information, IP address, and technical details needed to process the payment, prevent fraud, provide receipts, and meet its legal obligations. I receive the transaction record and customer email needed to support the purchase. I do not see or store your full card number.

Stripe handles that information under its privacy policy. After successful payment, Stripe confirms the purchase to this site and I use the checkout email only to send a signed, time-limited download link. No site account is created and the payment does not add you to the newsletter.

Digital access is provided by email shortly after payment, so purchases are generally final once access is delivered. If you were charged twice, a file is broken, the email does not arrive, or the product is materially different from its description, email me at hello@mubienahsan.com and I will make it right. Nothing here limits a consumer right that cannot be excluded under applicable law.

The included single-purchaser licence allows your own work and internal work within one organisation. It does not permit public sharing, resale, sublicensing, or distribution of the reusable source files. The complete licence is included with the download.

I am in Ontario, Canada, so the relevant federal law is the Personal Information Protection and Electronic Documents Act (PIPEDA). PIPEDA governs how organisations handle personal information in the course of commercial activity. Because this site sells a digital product, I treat purchase-related personal information as commercial activity and apply the accountability, purpose, consent, safeguarding, access, and retention principles relevant to it. Ontario has no separate private-sector privacy law of general application.

I have written this policy to the PIPEDA standard regardless. The practical commitment is simple: collect only what is needed for delivery, payment records, support, fraud prevention, and legal duties; protect it; and do not reuse purchase data for marketing without consent.

Readers elsewhere are welcome and their law travels with them. If you are in the United Kingdom or the European Union, the UK GDPR and the GDPR give you rights over your personal information regardless of where I am. If you are in Quebec, British Columbia or Alberta, those provinces have their own private sector privacy statutes. In each case, email me to exercise a right and I will respond based on the law and the information actually held by me or my service providers.

You have the right to ask what personal information I hold about you, to have it corrected, to have it deleted, and to object to how it is used. To do any of that, or to have our correspondence deleted, email me and ask. I will not charge you and I will not make it difficult.

If you are not happy with how I have handled something, you can complain to a regulator. In Canada that is the Office of the Privacy Commissioner of Canada. In the UK it is the Information Commissioner's Office, and in the EU it is your national data protection authority.

This site is written for adults and is not directed at children. I do not knowingly collect information about anyone, which includes children.

This site links out to other people's work: courses, essays, tools, and my own projects on other domains. Once you follow a link you are on someone else's site, under their terms and their privacy practices, not mine. A link is a recommendation to read something, not an endorsement of how that site handles your data.

The same goes for my profiles on LinkedIn and Instagram, which are run by those companies under their own rules.

If I add anything that changes the answers here, such as a community or analytics, I will update this page and change the date at the top before it goes live rather than after. Until then, what is written above is what happens.