Effective Date: 01 January 2026 Last Updated: 24 March 2026 Governing Jurisdictions: EU · USA · Azerbaijan · Russia · CIS · Asia · Pakistan
1. Who We Are
AJ & Company is a business consulting firm specializing in Strategy, Operations, Technology, and AI; and operate internationally,
This Privacy Policy explains how we collect, use, store, and protect the personal and business data of visitors to our website (abdullahjehangir.com) and clients who engage our services — wherever in the world they are located.
By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please refrain from using our website or services.
2. Data We Collect
We collect only what is necessary to deliver our services and operate our business. The categories of data we may collect include:
| Category | Examples | Source |
|---|---|---|
| Identity & Contact | Full name, email address, phone number, job title | You directly (forms, email, meetings) |
| Business Information | Company name, industry, size, operational details, financials shared during engagements | You directly, during consulting engagements |
| Payment Information | Billing address, invoicing details | You directly; payment processors |
| Communication History | Emails, contact form submissions, meeting notes | You directly |
| Website Usage & Analytics | IP address, browser type, pages visited, time on site, referral source | Automatically via cookies and analytics tools |
We do not collect sensitive personal data (such as health data, biometric data, or government ID numbers) unless explicitly required for a specific engagement and with your prior written consent.
3. How We Use Your Data
We use your data solely for the following legitimate purposes:
| Purpose | Data Used |
|---|---|
| Delivering consulting services | Identity, business information, communication history |
| Responding to enquiries | Identity, contact info, communication history |
| Issuing invoices and processing payments | Identity, payment information |
| Improving our website and services | Website usage and analytics data |
| Sending service-related communications | Contact info, communication history |
| Complying with legal obligations | Any data as required by applicable law |
We do not knowingly sell, rent, or trade your personal data to third parties for their own marketing purposes.
4. Legal Bases for Processing
We process personal data under the following legal bases, which vary by jurisdiction:
| Jurisdiction | Applicable Law | Legal Basis We Rely On |
|---|---|---|
| European Union / EEA | GDPR (Regulation 2016/679) | Contract performance; Legitimate interests; Legal obligation; Consent |
| United States | CCPA / state privacy laws | Business purpose; Consumer consent where required |
| Azerbaijan | Law on Personal Data (2010) | Consent; Contract performance; Legal obligation |
| Russia | Federal Law No. 152-FZ | Consent; Contract performance; Legal obligation |
| CIS & Asian Countries | Applicable national laws | Consent; Contract performance |
Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
5. Third-Party Tools & Service Providers
To operate our website and deliver our services effectively, we work with select third-party providers. These providers act as data processors on our behalf and are contractually bound to handle your data securely and only for the purposes we specify.
| Category | Purpose | Data Shared |
|---|---|---|
| Website Analytics (e.g. Google Analytics) | Understanding website usage and improving performance | Anonymised usage data, IP address |
| CRM Platform (e.g. HubSpot, Salesforce) | Managing client relationships and communications | Identity, contact info, communication history |
| Email Marketing Tools | Sending service updates and relevant communications | Name, email address |
We do not authorise these providers to use your data for their own independent purposes. We encourage you to review the privacy policies of any third-party platforms you interact with directly.
6. AI Tools & Client Data
As a technology and AI consulting firm, we may, on a case-by-case basis, use AI-powered tools to assist in delivering services. When this is relevant to your engagement, we will inform you in advance.
We will never input identifiable client data into any AI tool without your prior knowledge. Where AI tools are used, we take measures to anonymise or pseudonymise data where possible, and we only use tools with acceptable data protection standards.
If you share confidential business information with us during a consulting engagement, that information is handled with professional discretion and is not used for any purpose beyond serving your engagement.
7. Data Retention
We retain personal and business data only for as long as it is necessary. Our general retention principles are as follows:
| Data Type | Retention Period |
|---|---|
| Client engagement data (business info, communications) | Duration of the project, then securely deleted upon completion |
| Financial and invoicing records | As required by applicable tax and accounting laws (typically 5–7 years) |
| Website analytics data | As per the analytics provider’s retention settings (typically 14–26 months) |
| Contact form enquiries (non-clients) | 12 months from last contact, then deleted |
Upon project completion, all client data held by us — beyond what is legally required to be retained — will be deleted or returned to you upon request.
8. Your Rights
Depending on your jurisdiction, you may have some or all of the following rights regarding your personal data. We honour these rights for all clients and visitors, regardless of where they are located.
| Right | What It Means |
|---|---|
| Right of Access | Request a copy of the personal data we hold about you |
| Right to Rectification | Ask us to correct inaccurate or incomplete data |
| Right to Erasure | Request deletion of your personal data where it is no longer necessary or where you withdraw consent |
| Right to Restriction | Ask us to pause processing of your data after completion of contract |
| Right to Portability | Receive your data in a structured, machine-readable format |
| Right to Object | Object to processing based on legitimate interests or for direct marketing |
| Right to Withdraw Consent | Withdraw consent at any time where processing is consent-based |
Right to Erasure: You may request deletion of your personal data at any time by contacting us at official@abdullahjehangir.com. We will action your request within 30 days, subject to any legal obligations that require us to retain certain records.
To exercise any of these rights, please contact us using the details in Section 15. We will respond within 30 days and will never charge a fee for reasonable requests.
9. International Data Transfers
As an internationally operating firm, your data may be processed in countries outside your own. We serve clients across the EU, USA, Azerbaijan, Russia, CIS States, Pakistan, and Asian countries.
Where personal data is transferred across borders, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for transfers from the EU/EEA, and equivalent contractual protections for other jurisdictions. We do not transfer data to countries without adequate data protection measures unless we have your explicit consent or a legitimate legal basis to do so.
If you are a resident of Russia, we note that Russian law (Federal Law No. 152-FZ) requires that personal data of Russian citizens be stored on servers located within the Russian Federation. Where required, we comply with this obligation through our third-party service providers.
10. Cookies & Tracking
Our website uses cookies and similar tracking technologies to improve your browsing experience and help us understand how visitors use our site.
| Cookie Type | Purpose |
|---|---|
| Essential Cookies | Required for the website to function properly. Cannot be disabled. |
| Analytics Cookies | Help us understand how visitors interact with our website (e.g. Google Analytics). Only set with your consent where required by law. |
| Functional Cookies | Remember your preferences and settings for a better experience. |
You can manage or disable non-essential cookies at any time through your browser settings. Note that disabling certain cookies may affect your experience on our website.
11. Children’s Data
Our website and services are directed exclusively at business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it without delay.
12. Data Security
We take the security of your data seriously. We implement appropriate technical and organisational measures to protect personal and business data against unauthorised access, accidental loss, destruction, or alteration. These measures include encrypted data transmission (TLS/HTTPS), access controls limiting data to authorised personnel only, secure deletion of data at the end of its retention period, and due diligence on the security standards of our third-party providers.
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
13. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where required by applicable law (including GDPR Article 33).
Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay, providing details of the nature of the breach, likely consequences, and measures taken or proposed to address it.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify active clients directly.
Your continued use of our website or services following any changes constitutes acceptance of the updated policy.
15. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how we handle your data, please contact us:
AJ & Company — Data Enquiries Email: official@abdullahjehangir.com Website: abdullahjehangir.com
If you are based in the European Union and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.
© 2026 AJ & Company. All rights reserved.