Privacy Policy

Who we are

This website, belakhan.com, is the official website of Bela Khan: psychologist, life coach, speaker and author. In this policy, “we”, “us” and “our” refer to Bela Khan and the team that runs this website. We are responsible for the personal information collected through this website.

If you have any questions about this policy or your information, please get in touch through our contact page.

The short version

• We collect only what we need: to answer your messages, register you for our courses and deliver the books you buy.
• We never sell your personal information.
• Card payments are handled by Stripe. We never see or store your full card number.
• We use the Meta Pixel and Meta Conversions API to measure our Facebook and Instagram ads. Visitors in Europe and the UK are asked first.
• You can ask us to see, correct or delete your information at any time.

Information we collect

When you contact us

When you use our contact form, we collect your name, email address, the topic you choose and your message. We use this only to reply to you and to follow up on your enquiry. Please don’t share sensitive health details through the form. For counselling, book a confidential session through Solace Islamic Mental Health Services, which has its own privacy policy.

When you register for a course

When you register for a course such as the Islamically Integrated Life Coaching (IILC) certification, we ask for your name, email address, WhatsApp number and country of residence. We use these to confirm your place, send payment details and contact you about the course. The course is run with the International Association of Muslim Life Coaches (IAMLC), who receive your registration. The next step of registration is a Google Form, which is covered by Google’s privacy policy.

When you buy a book

When you place an order, we collect the details needed to process it: your name, email address and billing details (such as country and address), the books you bought, the order total and the date. We use this to take payment, send your order confirmation and download links, provide support, prevent fraud and keep the records the law requires.

Your download links are sent to the email address you give at checkout. Each purchase includes a limited number of downloads within a limited time, and we record when your files are downloaded (including the IP address used) to protect the books against misuse.

Payments

Payments are processed by Stripe, through a Stripe account operated by 022digital on Bela Khan’s behalf. Your card details are entered into Stripe’s secure payment form and go directly to Stripe; they never touch our servers. Stripe may collect device and browsing information to detect and prevent fraud. You can read how Stripe handles your data in the Stripe Privacy Policy.

Information collected automatically

Like most websites, our web server records basic technical information when you visit, such as your IP address, browser type and the pages requested, to keep the site secure and working. These logs are kept by our hosting provider for a short period.

Cookies

We use cookies that are necessary for the website and shop to work, and cookies that help us measure our advertising (see Advertising and measurement below). If you are in Europe or the UK, the measurement cookies are only set after you choose “Accept”.

Cookie	Purpose	Duration
WooCommerce cart and session cookies (for example woocommerce_cart_hash, wp_woocommerce_session_*)	Remember what is in your cart and keep your checkout working	Up to 2 days
Stripe cookies (for example __stripe_mid, __stripe_sid)	Fraud prevention during checkout	Up to 1 year
WordPress login cookies	Only for site administrators who log in	Session / up to 14 days
_fbp, _fbc (Meta)	Advertising measurement: a random browser identifier, and the ad click identifier when you arrive from a Facebook or Instagram ad	Up to 13 months
bk_vid	Advertising measurement: a random identifier for your browser on this site	Up to 13 months
bk_um	Advertising measurement: scrambled (SHA-256 hashed) copies of the contact details you gave us, so later visits are matched correctly. The original details cannot be read from it.	6 months
bk_px, bk_consent	Remember whether measurement is allowed and your cookie choice	6 to 12 months
bk_pxq	Passes an add to cart event from our server to the next page	15 minutes

You can block or delete cookies in your browser settings, but the cart and checkout will not work without the necessary ones. Deleting this site’s cookies also resets your cookie choice, so you will be asked again.

Advertising and measurement

We advertise on Facebook and Instagram. To understand which ads bring people to this website and to show our ads to people likely to be interested, we use the Meta Pixel (code that runs in your browser) and the Meta Conversions API (the same information sent from our server, which keeps the measurement reliable).

Through these, Meta Platforms receives:

• the pages you view and the actions you take here, such as viewing a book or course, adding to cart, starting checkout, buying, registering for a course, contacting us, playing a video and how far you scroll;
• order details such as the products, value and currency (never your card details);
• technical information such as your IP address, browser and device type, and the identifiers in the cookies listed above;
• when you have given them to us in a form or at checkout, your email address, phone number, name, city, postcode and country, in hashed (scrambled) form so they can be matched to a Meta account without being readable.

Meta uses this to measure our ads and to help deliver them, and may combine it with information it already holds about you, under the Meta Privacy Policy. For visitors in Europe and the UK we rely on your consent, which you can withdraw at any time by deleting this site’s cookies and choosing “No thanks”. Elsewhere we rely on our legitimate interest in measuring our advertising. You can control the ads you see in your Meta ad preferences.

Third-party services

We rely on a few trusted providers to run this website. They process data only as needed to provide their service to us:

• Hostinger hosts this website and its database.
• Stripe processes card and wallet payments (including Apple Pay, Google Pay, Link and Amazon Pay where offered).
• WooCommerce is the shop software that runs on our own website.
• Google Fonts provides the typefaces used on this site. When a page loads, your browser requests the fonts from Google, which receives your IP address. See the Google Privacy Policy.
• Meta Platforms provides the Meta Pixel and Conversions API we use to measure our Facebook and Instagram ads (see Advertising and measurement).
• YouTube plays the videos on our course pages. A video loads from YouTube only when you press play.

Our website links to other sites, such as Solace, Muslim Central, YouTube, LinkedIn, Instagram and Facebook. We don’t control those sites; their own privacy policies apply when you visit them.

How long we keep your information

• Contact messages: for as long as needed to deal with your enquiry, and no longer than two years.
• Course registrations: for the length of the course and up to two years after, so we can tell you about later levels. Ask us and we will delete them sooner.
• Orders and payment records: for as long as required by tax and accounting laws.
• Download records: for as long as your download links are valid, plus a reasonable period to handle support or disputes.

Sharing your information

We do not sell or rent your personal information. We share it only with the service providers listed above, when the law requires us to, or to protect our rights and prevent fraud.

International transfers

Our service providers may process information in countries other than your own, including the United States and the European Union. Where this happens, they use appropriate safeguards required by applicable data protection laws.

Your rights

Depending on where you live, you may have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information, unless we must keep it by law (for example, order records);
• object to or ask us to restrict how we use your information;
• withdraw your consent, where we rely on it; and
• complain to your local data protection authority.

To make a request, please use our contact page. We may need to confirm your identity before we respond, and we will reply within one month.

Children

This website is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has given us their details, please contact us and we will delete them.

Security

This website is served over an encrypted connection (HTTPS). Purchased files are stored in a protected location that cannot be accessed directly, and access to the website’s administration area is restricted.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed.