Privacy Policy

Who we are

This website, belakhan.com, is the official website of Bela Khan — psychologist, life coach, speaker and author. In this policy, “we”, “us” and “our” refer to Bela Khan and the team that runs this website. We are responsible for the personal information collected through this website.

If you have any questions about this policy or your information, please get in touch through our contact page.

The short version

• We collect only what we need: to answer your messages and to deliver the books you buy.
• We never sell your personal information.
• Card payments are handled by Stripe. We never see or store your full card number.
• We do not use advertising or analytics tracking on this website.
• You can ask us to see, correct or delete your information at any time.

Information we collect

When you contact us

When you use our contact form, we collect your name, email address, the topic you choose and your message. We use this only to reply to you and to follow up on your enquiry. Please don’t share sensitive health details through the form — for counselling, book a confidential session through Solace Islamic Mental Health Services, which has its own privacy policy.

When you buy a book

When you place an order, we collect the details needed to process it: your name, email address and billing details (such as country and address), the books you bought, the order total and the date. We use this to take payment, send your order confirmation and download links, provide support, prevent fraud and keep the records the law requires.

Your download links are sent to the email address you give at checkout. Each purchase includes a limited number of downloads within a limited time, and we record when your files are downloaded (including the IP address used) to protect the books against misuse.

Payments

Payments are processed by Stripe, through a Stripe account operated by 022digital on Bela Khan’s behalf. Your card details are entered into Stripe’s secure payment form and go directly to Stripe; they never touch our servers. Stripe may collect device and browsing information to detect and prevent fraud. You can read how Stripe handles your data in the Stripe Privacy Policy.

Information collected automatically

Like most websites, our web server records basic technical information when you visit — such as your IP address, browser type and the pages requested — to keep the site secure and working. These logs are kept by our hosting provider for a short period.

Cookies

We use a small number of cookies that are necessary for the website and shop to work. We do not use advertising or analytics cookies.

Cookie	Purpose	Duration
WooCommerce cart and session cookies (for example woocommerce_cart_hash, wp_woocommerce_session_*)	Remember what is in your cart and keep your checkout working	Up to 2 days
Stripe cookies (for example __stripe_mid, __stripe_sid)	Fraud prevention during checkout	Up to 1 year
WordPress login cookies	Only for site administrators who log in	Session / up to 14 days

You can block or delete cookies in your browser settings, but the cart and checkout will not work without them.

Third-party services

We rely on a few trusted providers to run this website. They process data only as needed to provide their service to us:

• Hostinger — hosts this website and its database.
• Stripe — processes card and wallet payments (including Apple Pay, Google Pay, Link and Amazon Pay where offered).
• WooCommerce — the shop software that runs on our own website.
• Google Fonts — provides the typefaces used on this site. When a page loads, your browser requests the fonts from Google, which receives your IP address. See the Google Privacy Policy.

Our website links to other sites — such as Solace, Muslim Central, YouTube, LinkedIn, Instagram and Facebook. We don’t control those sites; their own privacy policies apply when you visit them.

How long we keep your information

• Contact messages: for as long as needed to deal with your enquiry, and no longer than two years.
• Orders and payment records: for as long as required by tax and accounting laws.
• Download records: for as long as your download links are valid, plus a reasonable period to handle support or disputes.

Sharing your information

We do not sell or rent your personal information. We share it only with the service providers listed above, when the law requires us to, or to protect our rights and prevent fraud.

International transfers

Our service providers may process information in countries other than your own, including the United States and the European Union. Where this happens, they use appropriate safeguards required by applicable data protection laws.

Your rights

Depending on where you live, you may have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information, unless we must keep it by law (for example, order records);
• object to or ask us to restrict how we use your information;
• withdraw your consent, where we rely on it; and
• complain to your local data protection authority.

To make a request, please use our contact page. We may need to confirm your identity before we respond, and we will reply within one month.

Children

This website is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has given us their details, please contact us and we will delete them.

Security

This website is served over an encrypted connection (HTTPS). Purchased files are stored in a protected location that cannot be accessed directly, and access to the website’s administration area is restricted.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed.