Effective date: 1 January 2026 · Last updated: 1 January 2026
This Privacy Policy describes how KAMILAH MIRZA, LLC collects, uses, stores and protects information when you visit our website, contact our chart room or commission a systems mapping survey from our practice. The developer and owner of this website and the responsible party for the practices described here is Kamilah Mirza. We have written this policy in plain language because we believe that a person should be able to understand what happens to their information without the aid of a lawyer.
KAMILAH MIRZA, LLC is a computer integrated systems design consultancy working from 4380 Harrison Blvd APT 49, Ogden - 84403-6110, United States (US). Our work is document based. We draw process, network, integration and data maps for businesses, and we take the confidentiality of everything we see during that work extremely seriously. This policy explains the commitments we make both to visitors of this website and to clients who engage us for survey services.
By using this website, you acknowledge that you have read and understood this policy. If you do not agree with the practices described here, please discontinue use of the website and contact us directly so that we can address any concern you may have. We would rather answer a question than lose your trust.
This policy applies to the website located at kamilahmirza.hair and to all correspondence, enquiries and survey engagements that follow from it. It covers information collected through the enquiry form, by email, by telephone, in person during a survey visit and through any document you choose to share with us during an engagement.
This policy does not apply to third party websites that may be linked from our pages. We do not control those sites and we cannot speak for their practices. If you follow a link away from our site, we encourage you to read the privacy policy of the site you land on before providing any personal information to it.
This policy also does not apply to the internal systems of our clients. During a survey we may observe or be given access to client data as part of mapping exercises. That material is governed by the confidentiality terms of the specific engagement as well as the general protections described here.
The data controller for the purposes of applicable privacy law is KAMILAH MIRZA, LLC. Our registered address is 4380 Harrison Blvd APT 49, Ogden - 84403-6110, United States (US). The individual responsible for privacy matters at the practice is Kamilah Mirza.
If you have any question about how your information is handled, or if you wish to exercise any of the rights described below, you can reach the controller directly at care@kamilahmirza.hair or by telephone on +15856652144. Correspondence sent to the chart room address is also received and read.
We are a small practice, and the person who reads your email is the same person who answers for the choices described in this policy. That fact shapes our approach considerably: we collect little, we keep little, and we take care with what we hold.
We limit collection to what is genuinely necessary to respond to an enquiry, provide a survey and run a lawful business. The categories of information we may collect include the following.
Our website is deliberately lightweight. We do not run advertising networks, we do not embed social tracking pixels and we do not build behavioural profiles of visitors. Basic technical information such as the type of device and browser you use may be recorded by our hosting provider in ordinary server logs for security and reliability purposes. Those logs are used to keep the site available and to detect abuse, not to identify or track individuals.
Most of the information we hold comes directly from you. You type your name and message into the enquiry form, you send us an email, you telephone the desk or you speak with us during a survey visit. In every one of those cases the information arrives because you chose to provide it.
A smaller amount of information is created by us in the course of doing the work. When we draw a process map, we record what we observed. When we issue an invoice, we create an accounting record. When we exchange emails, our mail system stores them so that both sides have a record of what was agreed.
We do not purchase contact lists, we do not acquire personal data from data brokers and we do not scrape information from other websites in order to build a marketing database. If you hear from us, it is because you contacted us first or because we are continuing a conversation you began.
We use the information we hold for a narrow set of purposes, each of which is tied directly to running the practice honestly and serving the people who contact us.
We do not use your information for automated decision making, we do not subject anyone to profiling, and we do not sell information to any third party for any purpose whatsoever. That last point is not a policy we might revise at some future date; it is a description of how the practice is run.
Where privacy law requires us to identify a lawful basis for processing, we rely on the following grounds.
When you submit an enquiry through our form or write to us voluntarily, you consent to our use of the details you provide for the purpose of answering you. You may withdraw that consent at any time by telling us that you no longer wish us to hold your information.
When you commission survey work, we process the information needed to deliver that work and to be paid for it. This processing is necessary for the performance of the contract between you and the practice.
We retain certain accounting and tax records because the law requires us to keep them. We process that information solely to meet those obligations.
We have a legitimate interest in protecting our website from abuse, maintaining the security of our systems and keeping accurate records of the work we perform. Where we rely on this basis, we balance our interest against your rights and we keep the processing to a minimum.
Like most small practices, we rely on a handful of service providers to run our operations. These include a web hosting provider, an email provider, an accounting platform for invoicing and a document storage service. Each of these providers processes information only on our instructions and only for the purpose of delivering their service to us.
We choose providers with care and we review their security practices when we engage them. We do not grant providers permission to use our clients information for their own marketing or product development. Where a provider processes information on our behalf, we keep a record of the categories of data involved and the safeguards that apply.
If a provider is replaced, we take reasonable steps to ensure that information held by the outgoing provider is transferred securely or deleted in accordance with our instructions.
Our practice is based in the United States, and information we hold is generally stored on systems located in the United States. Some of our service providers may store data in other countries. Where that happens, we take reasonable steps to ensure that appropriate safeguards protect the information in transit and at rest.
If you are contacting us from outside the United States, you should be aware that your information will be transferred to and processed in the United States. We rely on lawful transfer mechanisms where they are required, and we keep transfers to the minimum needed to provide our services.
We keep information only for as long as we need it for the purpose it was collected, or for as long as the law requires us to retain it.
When information is no longer needed, we delete it or render it no longer identifiable. We do not keep dormant copies out of habit. If you ask us to delete information that we are not required to retain, we will do so and confirm that it has been done.
We protect the information entrusted to us with a combination of technical measures and disciplined practice. Access to client material is limited to the people who need it to do the work, and in a practice of this size that means a very small number of people. We use strong authentication on the systems that hold client information.
Data is encrypted in transit between your browser and our website, and between our systems and the service providers we rely on. Where documents are stored, we choose providers that encrypt data at rest and that maintain recognised security certifications.
We take our obligations during surveys seriously. Information observed while drawing a client estate is treated as confidential by default. We do not reuse one client material in another client drawings, and we do not discuss the details of a survey outside the engagement. If you believe that the security of any information held by us has been compromised, please contact us immediately at care@kamilahmirza.hair.
Depending on where you live, you may have legal rights in relation to the information we hold about you. We extend the following rights to everyone who contacts us, regardless of location, because we consider them basic standards of fair dealing.
To exercise any of these rights, contact the controller at care@kamilahmirza.hair or by telephone on +15856652144. We will respond to a verified request within a reasonable period, generally within thirty days. We may need to confirm your identity before acting, so that we do not disclose information to the wrong person.
This website and our services are intended for businesses and adult professionals. We do not knowingly collect information from children. Our survey work concerns technology estates rather than consumer services, and we do not direct any part of our website at minors.
If you believe that a child has provided personal information to us, please contact us at care@kamilahmirza.hair and we will take prompt steps to delete that information from our records. We take this obligation seriously and we act on such requests without hesitation.
We do not send bulk marketing email and we do not add enquirers to any promotional list. If you contact us about survey work, we will write to you about that work and nothing else. You will not begin receiving newsletters, offers or announcements merely because you asked a question.
Should we ever introduce an occasional update for past clients, it will be opt in, it will be clearly labelled and every message will include a simple way to leave the list. Choosing not to receive updates will never affect the service you receive from us.
If you have received a message that appears to come from our practice but that you did not expect, please forward it to care@kamilahmirza.hair so that we can investigate whether our name is being misused.
We may update this policy from time to time to reflect changes in our practices, in the services we offer or in applicable law. When we make a material change, we will update the effective date at the top of this page and we will describe the change in the revision notes we keep internally.
We encourage you to review this page periodically if you maintain an ongoing relationship with the practice. Continued use of our website after a revision has been published indicates that you accept the updated policy. If you do not accept a revision, you are welcome to tell us and we will discuss the matter with you directly.
Older versions of this policy are retained so that we can demonstrate the basis on which information was processed at a particular time. If you need a copy of a previous version, contact the chart room.
If you have a question about this policy, a concern about your information or a request to exercise one of your rights, please contact the controller using the details below. We read every message and we answer them personally.
We are committed to resolving privacy concerns quickly and fairly. If you are not satisfied with our response, you may have the right to escalate the matter to the supervisory authority in your jurisdiction, and we will not object to your decision to do so.