Your information, explained clearly.
How personal data is used when you read, learn, enquire or order.
Effective date: 13 September 2026
1. Who is responsible for your data
Waleed Asad, trading as Waleed Asad, Dublin, Ireland, is the controller of personal data collected for this website and its learning resources. For privacy questions or to exercise your rights, email hi@waleedasad.com. This is the privacy contact; it does not imply that a statutory data protection officer has been appointed.
This policy covers waleed.page, Unaddressed!, class notes, practice questions, mock exams, optional marking, template enquiries, customer accounts and website forms. Hyax hosts the site and provides its publishing, account, course, order, form and related platform functions. Other websites reached through external links have their own privacy policies.
2. Information we collect
Information you provide: your name and email address; account and profile details; subject preferences and subscription choices; questions, comments, messages and any files you choose to submit; order and billing information where applicable; and correspondence about access, marking, complaints or privacy requests. A question submission may include an IFRS topic and question text. An email-update request records your selected subject preference.
Learning and transaction records: resources obtained, order references, payment status and refunds where relevant, access entitlements, and lesson or course progress when you use an account-based course. If you submit work for marking, we process the submitted answers and the feedback needed to provide that service. Publicly readable lessons do not require an account merely to read them.
Technical information: Hyax may process IP address, device and browser information, operating system, language, page requests, timestamps, referrer, campaign parameters, approximate country derived from IP address, cookie or visitor identifiers, and technical errors. Some information supports essential delivery and security; optional analytics is subject to the cookie choices described below.
Information from others: the platform and, where used, payment or sign-in providers may return account identifiers, transaction status, a name, email address or profile image needed for the function you select. We do not ask for your social-media password. We do not receive full payment-card details through a question or newsletter form; do not send them to us by email.
3. Why we use data and our lawful bases
Providing requested resources and services — contract or steps you request before a contract. We use necessary identity, account, order, access and submission information to deliver a resource, provide agreed marking, answer a pre-order question, restore access or resolve an order issue. An account may be needed for saved progress or a restricted library, but not for all public reading.
Responding to general enquiries and choosing editorial topics — legitimate interests. Our interest is to run a useful educational website, respond to readers and decide which IFRS questions to discuss. We use the information needed to understand the request, and take account of your privacy and reasonable expectations. We minimise private information in any published discussion.
Email updates — consent. If you request updates, we use your email and selected preferences to send relevant news about articles, notes, practice, mocks or templates when those updates are available. Submitting an unrelated question, obtaining a free resource or making a purchase does not automatically enrol you in marketing. You may withdraw consent at any time.
Optional cookies and usage analytics — consent where required. With the relevant choice, usage information helps us understand which resources are useful and improve navigation. Necessary technical processing for delivery and security relies on our legitimate interest in operating a safe, functioning site or on providing a service you request, as appropriate.
Security, fraud prevention and protecting rights — legitimate interests. We use proportionate technical and account information to prevent misuse, investigate faults, protect intellectual property and establish, exercise or defend legal claims. We do not use these interests as a blanket reason to retain or disclose everything you submit.
Legal obligations. We retain and use records where required for tax, accounting, lawful regulatory requests and data-protection obligations. Where we need your permission to identify you in a published answer or use your testimonial, we will ask separately and explain the intended use.
4. Required and optional information
Required fields are identified on the relevant form or checkout. Without a valid email we may be unable to respond, provide account access or send requested updates. Without necessary order information we may be unable to fulfil a transaction. Optional profile details, marketing preferences and additional background are not required simply to browse the public website. Please provide only information relevant to your request.
5. Questions, comments and submitted answers
Please remove client names, employer-confidential material, identifiers and other unnecessary personal data before submitting a question or practice answer. Do not send sensitive health, financial-account, identity-document or other special-category information. If such information arrives unintentionally, we will assess whether it is needed and arrange appropriate removal or restriction.
We may turn selected reader questions into public articles using an anonymised or generalised scenario. Your private email address and correspondence are not automatically published. We will ask before identifying you as the contributor. Content that you deliberately post as a public comment is visible to other visitors; avoid including details you wish to keep private. Contact us if you need help with a published contribution.
6. Email preferences and communications
You can request, change or stop marketing updates by emailing hi@waleedasad.com. Where a marketing email includes an unsubscribe or preference link, you can use it directly. Withdrawal does not affect the lawfulness of processing before withdrawal. We may retain a minimal suppression record so that an unsubscribed address is not inadvertently added back.
Essential service messages, such as account access, order confirmations, replies to a question you submitted and important changes affecting a resource you obtained, are separate from marketing. Email delivery services may process recipient addresses, delivery, bounce, complaint and unsubscribe records. Marketing campaigns depend on the site's email-sending facilities being available; subscribing is not a promise of a particular frequency.
7. Who receives information
Hyax and its service providers: the platform processes information to host pages and files, manage accounts and learning access, handle forms, maintain security and deliver platform communications. Hyax identifies services including AWS SES and Resend for email, Bunny CDN for content delivery, and Stripe for payments where enabled. The providers relevant to a particular interaction depend on the feature used. See Hyax’s Privacy Policy for its own platform processing.
Payment providers: when paid checkout is available, the payment provider identified at checkout processes payment credentials and returns transaction information needed to fulfil and account for the order. Payment providers may also act as independent controllers for their fraud-prevention and legal obligations. A forthcoming template card does not itself collect payment information.
Other necessary recipients: email providers used to receive and respond to correspondence; professional advisers where needed for accounts, a dispute or legal compliance; and public authorities where disclosure is legally required. Any authorised support access must be limited to the task. We do not sell personal data or provide mailing lists to advertisers.
External links may lead to another operator, including a document, professional body or social site. That operator receives information when you use its service. We do not control its privacy practices. We will update this policy and the relevant notice before introducing materially different tracking or integrations.
8. Cookies and similar technologies
Necessary technologies support functions such as sign-in, session security, consent choices and requested account or transaction features. These may operate without optional-cookie consent when strictly necessary for a service you request. Optional analytics technologies can record visits, pages used and related technical information to understand resource usage. Hyax provides the native analytics and consent facilities.
The site displays a native cookie-choice banner. You can accept or reject optional cookies. Rejection does not mean that essential delivery or security records stop being processed. Use the available cookie-preference control to revisit your choice. You can also clear this site's stored cookies in your browser to display the choice again, or block cookies through browser settings; doing so may sign you out or affect account features.
As at the effective date, no Google Analytics, Google Tag Manager or Meta advertising identifier has been configured in this site's Hyax analytics settings. We do not describe those services as active trackers. Cookie lifetimes differ by purpose: session data may expire when a session ends, while preferences and consent records can persist until expiry or removal. Contact us for information about a particular identifier. This notice covers browser storage and similar identifiers as well as cookies.
9. How long information is kept
Retention depends on the purpose, the resource provided, your relationship with us and applicable law. We do not treat every category as having the same retention period. Account details and learning access records are kept while needed to provide the account and its entitlements. Following closure, information no longer needed is deleted or anonymised, subject to legal records, outstanding disputes, security needs and the platform's backup lifecycle.
Questions, ordinary correspondence and submitted practice work are kept only while needed to respond, provide feedback, manage follow-up or retain an appropriate record of the matter. We consider whether a reply is complete, whether an issue remains open, whether publication has been agreed and whether identifiable material can be removed. An anonymised published explanation may remain as an educational article.
Marketing contact details are retained while you remain subscribed or until no longer needed for the requested updates, with a minimal opt-out record where necessary. Accounting and transaction records are generally retained for six years where Irish tax law requires this, and longer only where a specific legal obligation or unresolved matter justifies it.
Usage and security records are retained while needed to compare resource use, diagnose problems and investigate abuse. We assess whether identifiable detail is still necessary and whether aggregate information will suffice. Hyax's retention settings and provider-managed backups also affect deletion timing; this policy does not promise a particular automatic analytics-deletion period. Ask us about the criteria or records relevant to you, or request deletion where your rights apply.
10. International processing
Although we are based in Ireland, Hyax and other providers may process information outside the European Economic Area. The locations and legal safeguards depend on the provider and service involved. Where a transfer is subject to GDPR restrictions, an applicable adequacy decision or another lawful safeguard, such as European Commission standard contractual clauses with any necessary supplementary measures, is required. You may contact us for details of the relevant recipient, destination and safeguards or to request a copy, subject to appropriate redaction. We do not assume that every provider stores information solely in Ireland.
11. Your data-protection rights
Depending on the circumstances, you may request access to your personal data and a copy; correction of inaccurate or incomplete information; erasure; restriction of processing; and portability of data you provided where processing is automated and based on consent or contract. You may object to processing based on legitimate interests on grounds relating to your situation. You may object to direct marketing at any time, including related profiling.
You may withdraw consent without affecting earlier lawful processing. Some rights have legal exceptions, for example where a record must be retained by law or is needed for a legal claim. We will explain any refusal or limitation rather than simply ignoring a request.
Email hi@waleedasad.com with a description of your request. We may ask for proportionate information to verify identity, but will not routinely ask for unnecessary identification documents. We normally respond within one month. If a lawful extension is needed because of complexity or the number of requests, we will explain within that month; an extension can be up to two further months. Requests are ordinarily free, subject to the limited exceptions permitted by law.
12. Complaints
Please contact us first if you wish, so that we can investigate. You may also complain directly to the Irish Data Protection Commission or the competent supervisory authority where you live, work or believe an infringement occurred. You do not have to use our complaint process before contacting an authority.
13. Security, children and automated decisions
We use reasonable technical and organisational safeguards, including the platform's encrypted connections and access controls, and limit use of personal information to the relevant purpose. No website or email system can guarantee absolute security. Tell us promptly if you suspect unauthorised access; do not send passwords or payment-card details in ordinary messages.
The site is not directed at children under 16. If you believe a child has provided personal data, contact us so that we can assess and remove or otherwise handle it appropriately. People under 18 should involve a parent or guardian in purchases.
We do not currently make decisions about you with legal or similarly significant effects solely through automated processing, and optional educational marking is not an official qualification decision. We do not license private reader submissions to third parties for public AI-model training. If we introduce a materially different use, including automated assessment or a new AI service handling submissions, we will first explain the purpose, data involved, lawful basis and any necessary choices.
14. Policy changes and contact
We will update this policy when the site's services or processing change and show the new effective date. Where required, we will provide a prominent notice or contact affected people before a material change. Publishing this policy does not itself obtain your consent for optional processing.
Privacy contact: hi@waleedasad.com
Waleed Asad · Dublin, Ireland
Related document: Terms & Conditions