This policy explains how personal data is handled on naoufalchobah.com and in sessions with Naoufal Chobah. The short version: the site itself collects nothing about you. It has no accounts, no forms, no comments, no analytics, no advertising and no cookies. The only personal data Naoufal handles is what you choose to give him to book and hold a session.
1. Who is responsible
The controller for the purposes of the EU and UK General Data Protection Regulation (GDPR) and similar laws is Naoufal Chobah, Thailand. Contact: contact@naoufalchobah.com.
2. What the site does not do
- No cookies are set by the site, and nothing is stored in your browser's local or session storage.
- No analytics, tracking pixels, fingerprinting, advertising or social media widgets.
- No accounts, sign-ups, contact forms or comment boxes.
- No third-party requests while you read: fonts, images, styles and scripts are all served from this site's own domain. The only scripts on the site run in your browser to improve the page and send nothing anywhere.
- No sale or sharing of personal data with anyone for marketing.
3. Hosting and delivery (Cloudflare)
Like every website, this site has to receive your browser's request in order to send you a page. The site is hosted and delivered by Cloudflare, Inc., which acts as a processor and infrastructure provider. To deliver pages and protect the site against abuse and attacks, Cloudflare automatically processes technical request data, such as your IP address, the page requested, the date and time, your browser's user agent, the referring page, and network diagnostics. Cloudflare may also ask your browser to report network errors to it so it can keep the service reliable.
Naoufal does not use this data to identify, track or profile visitors, and does not combine it with any other data. The legal basis is legitimate interests (Article 6(1)(f) GDPR): delivering a website securely and reliably. Cloudflare keeps this data for limited periods under its own policy and may process it outside your country, including in the United States, under recognised safeguards such as the EU-US Data Privacy Framework and Standard Contractual Clauses. See Cloudflare's privacy policy.
4. Cookies
The site does not set any cookies and uses no similar technologies, so there is no cookie banner and nothing to consent to. If this ever changes, this policy will be updated first, and any non-essential cookie will only be used with your consent.
5. Links to other sites
When you follow a link to another site, including Naoufal's own projects such as NatalTruth, gab44, gissecrets or YOWYO, or GitHub, you leave this site. That site's own privacy policy then applies, and it may collect data and set cookies under its own responsibility.
6. Sessions
When you book or attend a consultation or coaching session, Naoufal processes only what is needed to arrange and hold that session:
- your name and contact details;
- the date, time and format of your session, and messages about scheduling;
- details you choose to share for the session, which for some readings may include your date, time and place of birth and your full birth name;
- payment records (card or bank details are handled by the payment provider, not stored by Naoufal).
This data is used only to hold your session, communicate with you about it, and meet legal obligations such as accounting and tax records. It is never sold, never used for advertising, and never shared except with the service providers needed to run the booking, video call or payment (each under its own privacy terms), or where the law requires it. The legal bases are the performance of the agreement with you (Article 6(1)(b) GDPR) and legal obligations (Article 6(1)(c) GDPR).
You decide what you say in a session. If you choose to share information about your health or other sensitive matters, you do so voluntarily and with your explicit consent (Article 9(2)(a) GDPR), which you may withdraw at any time. Sessions are not recorded unless both of you agree in advance.
Session data is kept only as long as needed for the purposes above. Accounting records are kept for the period the law requires. Everything else is deleted when it is no longer needed, or earlier if you ask.
7. Your rights
Depending on where you live, you have the right to access the personal data held about you, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time without affecting what happened before. To exercise any of these rights, write to contact@naoufalchobah.com. You will get an answer within one month. You also have the right to complain to the data protection authority in your country.
8. Age
The site and sessions are intended for adults. Naoufal does not knowingly collect personal data from anyone under 18.
9. Security
The site is served only over encrypted HTTPS connections and holds no visitor database. Session data is kept to a minimum and protected with reasonable care. No method of transmission or storage is perfectly secure, but the less that is collected, the less there is to lose.
10. Changes
This policy may be updated, for example when online booking opens. The date at the top shows the latest version. See also the Terms of Use and the Session Terms.