Privacy Policy
Last updated: 28 September 2026
This page explains what information heshamm.com and invoice.heshamm.com handle, and why. Both sites belong to me, Hesham Khamis, an independent performance marketing consultant. Questions go to me@heshamm.com.
01What I collect
When you contact me. If you email or message me on WhatsApp, I receive your name, contact details and what you send. I use it to reply and, if we work together, to run the project.
When you’re a client. To invoice you I record your name, company, email, phone, address and tax number where you give them, plus the invoice details. These are kept in my invoicing system at invoice.heshamm.com.
When you browse. This site has no contact forms, no analytics and no advertising pixels. It remembers your language choice in your browser’s local storage, which stays on your device.
02Services the sites rely on
Vercel hosts both sites. Like any host, it receives technical request data such as your IP address, browser and the pages requested.
Google Fonts, cdnjs and jsDelivr deliver fonts and code libraries. Your browser requests files from them, which shares your IP address with them.
WhatsApp and my email provider carry the messages you send me, under their own privacy policies.
Stripe is used only on the demo invoice page (heshamm.com/invoice), which runs in test mode. Card details typed there go to Stripe, not to me, and nothing is charged.
03How I use it
To reply to you, deliver and invoice the work, and keep the records that tax and accounting rules require. I don’t sell personal data, use it for advertising, or add you to mailing lists.
04Your accounts and data
When I work inside your ad, analytics or store accounts, I only access what the agreed work needs and don’t reuse your data for anything else. You can remove my access at any time; I stop using it when the engagement ends.
05Invoice links
Each invoice has its own private link that is hard to guess. Anyone who has the link can open that invoice, so share it only with the people who need it. The invoicing system itself is password-protected, and its sign-in cookie is used only by me.
06How long I keep it
Messages and project files: as long as the work and any follow-up need them. Invoices and billing records: as long as tax and accounting rules require. After that, I delete them.
07Your rights
You can ask what I hold about you, ask me to correct it, or ask me to delete it, unless I have to keep it for legal or tax reasons. Email me@heshamm.com and I’ll reply within 30 days.
08Security
Both sites use HTTPS, and invoice data sits in a private storage area that only the invoicing system can read. No system is perfectly secure; if a breach affects your data, I’ll tell you promptly.
09Changes
If this policy changes, I’ll update this page and the date at the top.