LEGAL

Privacy policy

What we collect when you take the Revenue Engine Scan, why, how long we keep it, and how to get a copy or ask for it to be deleted.

Start the Revenue Engine Scan

EFFECTIVE DATE - OCT 01, 2026 · LAST UPDATED - OCT 01, 2026

This privacy policy explains how Syed Jawad Ul Haq (Syed, we us or our), collects, uses, discloses, and retains personal information through www.syedjawad.com, the Revenue Engine Scan, Revenue Leak Report, scheduling, chat, communications and consulting engagements.

1. Who we are and how to contact us

Controller / Business: Syed Jawad Ul Haq

Trading Name: Syed Jawad Ul Haq

Business Location: Lahore, Pakistan

Email: [email protected]

Phone: +923224161601

2. Scope

The policy applies to information collected through:

- Our website and public forms

- Revenue Engine Scan and Revenue Leak Report

- Revenue Strategy Session scheduling and attendance

- Website chat, email, phone, SMS and other communications

- Proposals, agreements, invoices and payments

- Revenue Growth Roadmap, Consulting Retainer, and Systems Implementation engagements

- Analytics and similar technologies used on our website

It does not govern a third party's independent use of information. Third-party sites and platforms have their own policies.

3. Information we collect

3.1 Contact and professional information

We may collect your name, business email, phone number, country, company, role/job title, business website, timezone and communication preferences.

3.2 Revenue Engine Scan information

The scan requests information such as:

- Annual revenue range and business type

- Sales and marketing team sizes

- Marketing-support model

- Primary CRM and automation tools

- Paid advertising channels and monthly marketing budget

- Reported monthly new leads, average deal value and close rate

- Answers to 100 statements across ten Revenue Engine Capabilities

We use these answers to calculate an overall score, maturity stage, capability scores, identified gaps and an estimated revenue-at-risk figure. These are diagnostic estimates based substantially on self-reported information; they are not audited financial figures or guarantees.

3.3 Scheduling and session information

We may collect the requested meeting date and time, timezone, whether you completed the scan, calendar metadata, attendance status and information you provide during a strategy session or other meeting. We will not record or transcribe a call unless we give appropriate notice and obtain any consent required by applicable law.

3.4 Chat, forms and communication

We collect the content of messages, form submissions, emails, SMS messages, call notes, support requests and other correspondence, together with delivery and engagement metadata where available.

3.5 Client and engagement information

If you or your organisation engages us, we may collect:

- Contracting, billing and authorised contact details

- Business plans, revenue and funnel metrics, customer and pipeline information, team structures, technology information, processes, SOPs, assets and constraints

- Meeting notes, decisions, deliverables, project activity, approvals and access records

- Credentials or system access where necessary, preferably through secure invitations or a password manager rather than by receiving passwords

Clients should not provide personal, special-category, regulated or confidential customer data unless it is necessary, lawful and expressly agreed. Aggregated, de-identified or redacted information should be used where practical.

3.6 Billing and payment information

We use Payoneer as an external payment processor. Payoneer may collect payment-card or bank information directly under its own privacy policy. We do not receive or store complete payment-card details.

3.7 Device, usage and tracking information

When you use the website, we and our service providers may receive IP address, device and browser information, referring and requested URLs, dates/times, approximate location derived from IP, page interaction and performance and security data, cookie identifiers and similar technical information.

3.8 Derived information

We may derive lead status, qualification, maturity stage, capability gaps, session outcome, engagement suitability and service recommendations from information described above. We do not use solely automated decision-making that produces legal or similarity significant effects unless this Policy is updated and any applicable safeguards are provided.

4. How we collect information

We collect information:

- Directly from you when you complete the scan, book a call, use chat, communicate or become a client

- From your organisation and its authorised personnel

- Automatically from the website and communications

- From service providers that operate our forms, CRM, calendar, hosting or analytics

- From public business sources, referrals or professional networks where lawful

5. How we use information

We may use personal information to:

1 - Operate, secure, maintain and improve the website.

2 - Administer the Revenue Engine Scan, calculate results, create and deliver the Revenue Leak Report and troubleshoot delivery.

3 - Schedule, prepare for and conduct Strategy Sessions and other meetings.

4 - Respond to enquiries, chat messages and support requests.

5 - Maintain CRM records, avoid duplicate questioning and manage the prospect and client journey.

6 - Evaluate fit, prepare proposals and administer contracts.

7 - Deliver roadmap, advisory, and implementation services.

8 - Process invoices and payments and keep financial records.

9 - Send service messages such as report delivery, confirmations, reminders, changes and engagement communication.

10 - Send marketing by email, SMS or other channels where lawful and consistent with the consent or other legal basis required for that channel.

11 - Measure website, campaign, funnel and service performance.

12 - Protect our rights, systems, users and business; prevent misuse, fraud and security incidents.

13 - Meet legal, accounting, tax and regulatory obligations and respond to lawful requests.

14 - Establish, exercise or defend legal claims.

We will not use client confidential information to train a public or shared artificial-intelligence model without the client's prior written authorisation and appropriate safeguards.

6. Legal bases where applicable

Where a law such as the UK GDPR or EU GDPR requires a legal basis, the basis will depend on the activity:

6.1 Responding to an enquiry, providing requested Scan/report or taking pre-contract steps

Performance of a contract or steps requested before a contract; legitimate interests in responding and operating the service.

6.2 Booking and administering meetings

Contract/pre-contract steps; legitimate interests in scheduling and preventing no-shows.

6.3 Delivering paid services and billing

Performance of contract; legal obligations; legitimate interests in administration and debt recovery.

6.4 Site security, fraud prevention, basic operational measurement

Legitimate interests; strictly necessary technologies where applicable.

6.5 Operational analytics or advertising technologies

Consent where required; otherwise legitimate interests only where permitted after balancing rights.

6.6 Email or SMS marketing

Consent where required; in limited cases another lawful basis and applicable business-marketing exception. Channel-specific marketing rules still apply.

6.7 Legal, tax and accounting records

Compliance with legal obligation; legitimate interests in record keeping and claims.

Where we rely on legitimate interests, we consider the purpose, necessity and effect on individuals. You may object where applicable. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.

7. Operational and marketing communications

Operational messages, such as a requested report, appointment confirmation, service notice or client communication are different from promotional marketing.

Where we send marketing:

- We will identify the sender and provide the required unsubscribe method

- Email recipients can unsubscribe using the link in the message or contact us

- SMS recipients can follow the stated opt-out instruction, such as replying STOP, where supported, or contact us

- Opting out of marketing will not prevent necessary transactional or contractual messages

- Consent or opt-out records may be retained to honour your preference

8. Cookies and similar technologies

Cookies and similar technologies may support:

- Essential functions, including page delivery, forms, calendar and chat

- Security and performance, including traffic integrity and availability

- Analytics, to understand visits and conversion journeys

- Advertising or remarketing, only if enabled and lawfully controlled.

Where law requires consent for non-essential cookies, we will request it before placing or reading them. You can change your choice through the Cookie Settings control made available on the website. Browser settings may also book some technologies, although parts of the site may then function differently.

9. Analytics, advertising and remarketing

We may use advertising services provided by Meta, including Facebook and Instagram, and LinkedIn to promote our services, measure campaign performance, attribute conversions and understand how visitors respond to our advertising. Where enabled, and subject to consent or another valid legal basis where required, the Meta Pixel and LinkedIn Insight Tag may collect or receive information including your IP address, browser and device information, page URLs, referring pages, visit times, website interactions and conversion events. We may also use these technologies to create advertising audiences and show relevant advertisements to people who have previously interacted with our website.

Meta and LinkedIn may process this information in accordance with their own privacy policies and may combine it with information they already hold about their users. We do not receive information that directly identifies individual Meta or LinkedIn users solely from standard aggregated advertising reports.

We classify these technologies as non-essential advertising or analytics technologies. Where consent is required, they will not be activated unless you provide that consent. You may reject or withdraw your consent through the website's Cookie Settings. You may also manage advertising preferences through your Meta and LinkedIn account settings.

We do not sell personal information in exchange for money. However, under certain United States privacy laws, allowing advertising providers to receive identifiers and website activity for cross-context behavioural or targeted advertising may be considered a "sale", "sharing" or processing targeted advertising, even where no money is exchanged. Where such laws apply, eligible individuals may exercise the applicable opt-out rights described in section 15.

Further information is available in the Meta Privacy Policy and LinkedIn Privacy Policy.

10. Service providers and other recipients

We disclose personal information only where reasonably necessary. Depending on the services and features used, our providers include LeadConnector/HighLevel for website, CRM, forms, scheduling and chat functions; Cloudflare for content delivery, security, performance and traffic analytics; Payoneer for payment processing; and Meta and LinkedIn for advertising, attribution and remarketing. Other recipient categories may include:

- Website, form, CRM, calendar, chat, email and SMS providers

- Hosting, security, content-delivery and analytics providers

- Payment, invoicing, accounting and professional-advice providers

- Video-meeting, project-management, file-storage and communication providers

- Approved contractors or sub-contractors supporting an engagement

- A client organisation where the individual acts for that organisation

- Authorities, courts, advisers or counterparties where required by law or necessary for legal claims

- A successor in a merger, sale, financing or reorganisation, subject to appropriate confidentially and lawful notice

We do not disclose personal information merely for another party's unrelated marketing without an appropriate legal basis and notice. We do not promise that information is "never shared", because operating the service necessarily involves controlled disclosure to providers.

11. International transfers

We operate from Pakistan. If you are located elsewhere, your personal information may be transferred to, stored in or accessed from Pakistan and other countries in which our service providers or clients operate. Privacy laws and government-access rules may differ between countries. Where applicable law requires a recognised transfer mechanism or other safeguards, we will use an appropriate lawful mechanism and make information about the relevant safeguard available on request.

12. Retention

We retain personal information only for as long as reasonably required for the purposes described, including service delivery, suppression preferences, security, tax/accounting, contractual records and legal claims. Here's the applicable time period for each item:

12.1 Completed scan, report and lead/CRM record

12 months after completion of the scan or report.

12.2 Strategy session booking and notes

12 months after the session.

12.3 Unconverted enquiry/marketing record

12 months after the last substantive interaction.

12.4 Client source data and system exports

Returned or deleted within 90 days after project completion, unless the agreement specifies another period or continued retention is required by law.

12.5 Credentials/access

Access revoked and stored credentials deleted promptly when no longer required.

12.6 Client agreements, deliverables and project records

During the engagement and afterwards for as long as reasonably necessary for contractual administration, legal claims and applicable limitation periods.

12.7 Invoices, payment and tax or accounting records

For the period required by applicable tax, accounting and record keeping law.

12.8 Marketing opt-out and suppression records

For as long as reasonably necessary to honour the preference and prevent unwanted marketing.

12.9 Security and technical logs

Up to 12 months, unless a longer period is reasonably necessary to investigate or respond to a security incident.

12.10 Backup copies

Until overwritten through the ordinary controlled backup cycle.

At the end of the applicable period, information will be deleted or anonymised unless a lawful exception requires or permits continued retention. Backup copies may remain until overwritten in the ordinary backup cycle and will not ordinarily be restored except for continuity, security or legal purposes.

13. Security

We use reasonable administrative, technical and organisational measures proportionate to the information and service. No internet transmission or storage method is completely secure, and we cannot guarantee absolute security.

If you believe information has been compromised, contact us at [email protected].

14. Your choices and rights

Depending on location and applicable law, you may have rights to:

- Request access to personal information

- Correct inaccurate information

- Request deletion

- Restrict or object to processing

- Receive portable information

- Withdraw consent

- Opt out of certain marketing, sale/sharing or targeting advertising

- Appeal a decision on a privacy request

- Complain to an applicable regulator

These right are not absolute. We may need to verify your identify or authority and may retain information where law permits or requires. To make a request, email us at [email protected] with enough detail to identify the relevant record. We will respond within the period required by applicable law and explain any lawful refusal.

An authorised agent may submit a request where applicable, subject to verification of authority and the individual. We will not unlawfully discriminate against a personal for exercising a privacy right.

15. Privacy rights for residents of the United States and Canada

Privacy rights differ depending on where you live and which laws apply to our activities.

15.1 United States residents

Residents of certain states in United States may have rights to request access to or confirmation of the personal information we process; obtain a copy of that information; correct inaccurate information; request deletion; and obtain information in a portable format. Applicable law may also provide rights to opt out of the sale or sharing of personal information, targeted advertising or certain profiling, to limit certain uses of sensitive personal information, to appeal a decision concerning a privacy request, and to exercise privacy rights without unlawful discrimination.

We do not sell personal information for monetary payment. However, when enabled, our use of Meta and LinkedIn advertising technologies may constitute sharing, a sale or processing for targeted advertising under certain state privacy laws. Where an applicable law provides such a right, you may opt out through our Cookie Settings or another opt-out mechanism made available on the website. Information about browser-based privacy preference signals is provided in Section 16.

15.1 Canadian residents

Individuals in Canada may, subject to applicable federal or provincial privacy law, request access to personal information held about them, ask that inaccurate or incomplete information be corrected, and withdraw consent to future processing is based on consent. Withdrawal may be subject to reasonable notice and any applicable legal or contractual restrictions. Individuals may also raise a concern with us and, where appropriate, submit a complaint to the Office of the Privacy Commissioner of Canada or the relevant provincial privacy regulator.

Where consent is required for advertising cookies, behavioural advertising or similar technologies, you may refuse or withdraw that consent through our Cookie Settings without preventing access to the essential functions of the website.

To exercise an applicable privacy right, contact us at [email protected]. Please describe your request and the jurisdiction in which you reside. We may request information reasonably necessary to verify your identity and authority to make the request. We will respond within the period required by applicable law, subject to lawful exceptions.

16. Do Not Track and Global Privacy Control

Some web browsers provide a "Do Not Track" or "DNT" setting. Because there is currently no uniform industry standard governing how websites should interpret or respond to DNT signals, our website does not currently respond to them.

Some browsers and browser extensions may transmit privacy preference signals such as a Global Privacy Control. Our website does not currently detect or process these signals. You can use the Cookie Setting control or contact us at [email protected] to exercise any opt-out or other privacy right that may apply to you. We will assess and respond to the request as applicable law requires.

17. Children

The website and services are intended for business professionals and are not directed to children under 18. We do not knowingly seek personal information from children. If you believe a child has provided information, contact us so that we can assess and delete it where appropriate.

18. Third-party links and platforms

The website may link to or embed services operated by others. Their collection and use are governed by their own notices. We are not responsible for an independent third party's privacy practices, although we remain responsible for selecting and governing processors where applicable law requires it.

19. Changes to this Policy

We may update this policy as the website, services, vendors or law change. The updated version will show a new "last updated" date. Where a change is material, we will provide additional notice or obtain consent if applicable law requires it. The version in effect when information was collected does not prevent a lawful update, but we will not materially change the use of existing information without an appropriate basis and notice.