Legal
Last updated 26 July 2026
This policy explains what QIMAH Consulting collects, why, who it is shared with, and what you can ask us to do with it. It covers our website, the QIMAH client portal at portal.qimahconsulting.com, and the tools connected to them.
QIMAH Consulting is a business architecture consultancy operated by Justyn Ali, working with clients internationally. For any question about this policy or about your data, contact contact@justynali.com.
Account information. Your name, email address, phone number and social handle, given when you apply or when an account is created for you.
Work you create in the portal. Your answers, notes, recordings, uploads and the artefacts generated from them, including your intention, audience, position, offer, content pillars, voice profile and brand kit. This is your work and it is stored so you can return to it.
Information about your own prospects and clients. If you use the portal's pipeline, you may enter names, handles, notes and conversation details about other people. You control what goes in. See the section below on data you enter about others.
Connected account data. If you connect a third party service such as a scheduling tool, we store the access tokens needed to keep that connection working, and the booking information that service sends us, such as meeting times, cancellations and meeting links.
Enquiry and assessment data. If you complete an online assessment or download a tool, we collect the name, email and phone number you provide, and which tool you used.
Basic technical data. Standard server and delivery logs, used to keep the service running and secure.
We do not sell your information to anyone, and we do not sell advertising against it.
Parts of the portal use artificial intelligence to help draft and structure your work from the answers you provide. Output is reviewed by a person before it is treated as final, and nothing generated is sent to anyone on your behalf without you seeing it first. Your material is processed to produce your own artefacts, and is not used by us to train public models.
If you record information about your own prospects or clients in the portal, you remain responsible for that information and for having a proper basis to hold it. Keep it to what you genuinely need. Do not store sensitive personal details about third parties in the portal. On request we will help you export or delete anything you have entered.
We use a small number of providers to run the service. Each receives only what it needs to perform its function.
These providers operate in various countries, which means your information may be stored or processed outside the country you live in. We take reasonable steps to ensure it is handled to a comparable standard wherever it sits.
If you connect a scheduling account, we request only the access needed to read your event types and scheduled events, and to receive notifications when a booking is made, changed or cancelled. We use this to update your pipeline, show your upcoming meetings and store the meeting link. We do not read unrelated calendar content, we do not contact your invitees, and we do not use this data for anything beyond the features described here. You can disconnect at any time from the portal or from the provider, and the stored tokens are deleted when you do.
We keep your account and your work for as long as your engagement is active. If your engagement ends, your locked artefacts are provided to you and portal access is withdrawn. We will delete your stored data on request, except where we are required to retain records, such as for tax and accounting.
You can ask us to give you a copy of your data, correct anything inaccurate, delete your data, or stop sending you email. Write to contact@justynali.com and we will respond within a reasonable period. If the country you live in gives you additional statutory rights over your data, those rights apply to you and we will honour them regardless of where we are based.
Access to client data is restricted, credentials are held in secured environment configuration rather than in code, and data is transmitted over encrypted connections. No system is perfectly secure. If a breach affects you, we will tell you.
The service is intended for adults in business. We do not knowingly collect information from anyone under 18.
If you are unhappy with how we have handled your information, contact us first at contact@justynali.com. We would rather hear it directly and put it right. If you are not satisfied with our response, you may raise it with the data protection authority in the country you live in.
If this policy changes materially, we will update the date above and, where the change affects you meaningfully, tell you directly.