Data Rights

The rights you hold

If you have submitted an inquiry or diagnostic details through this website, you can exercise any of the following rights at any time, free of charge.

• Access: ask what information we hold about you and receive a copy
• Correction: have anything inaccurate or outdated corrected
• Deletion: have your information deleted
• Objection: object to our processing of your information
• Withdrawal of consent: withdraw any consent you previously gave, with effect from that point forward

What bnd actually holds

In practice, the information we hold about you is the inquiry email generated from your form submission, sitting in the founder's mailbox. There is no user database, no account record, and no analytics profile, because this site does not create them.

If you contacted us through the fallback route, where the site prepared an email in your own mail client, then nothing was ever stored on our servers; the only copies are the email you sent and our reply.

How to make a request

Email khaled@bnd.one and state which right you want to exercise. There is no form, no portal, and no template requirement; a plain sentence is enough.

It helps to send the request from the same email address you used in your original submission, and to mention roughly when you submitted, so we can find the right message quickly.

How we verify and respond

Because the information we hold is tied to the email address you gave us, a request from that address is normally verification enough. If a request arrives from a different address, we may ask a simple confirming question before acting, to avoid handing your information to someone else.

Valid requests are handled without undue delay and ordinarily within one calendar month, subject to any extensions permitted by applicable law. If a request is complex or unclear, we will tell you what we need rather than leaving it unanswered.

Retention and deletion

Inquiry emails are kept only as long as needed to handle the inquiry. When you ask for deletion, the email is deleted from the mailbox; there are no database copies to chase because none exist.

Short-lived rate-limiting records derived from IP addresses exist only in server memory and expire on their own. They are not written to any database we operate, and they are not retained in a form we can search or produce in response to a request.

Personal information and commercial transaction records

A request concerning personal information is not automatically the same as a request to withdraw organisational data from a proposed or completed transaction. Different records may be governed by data-protection law, confidentiality obligations, commercial contracts, accounting requirements, dispute-preservation duties, and regulatory obligations.

Where legally permitted, bnd may need to retain limited transaction records even after contact details are deleted, including evidence of authority, agreements, licence scope, delivery, payments, disputes, and compliance actions. bnd retains only what is necessary for those purposes, but it cannot promise that every record can always be deleted immediately.

Complaints and further detail

If you believe we have handled your information badly, tell us first at khaled@bnd.one and we will try to put it right. Depending on where you live, you may also have the right to complain to a data protection authority in your jurisdiction.

bnd's formal legal entity details, including its registered jurisdiction, will be published on this site when the company's registration details are finalised. The Privacy Notice describes our full handling of personal information.