Privacy Policy — The Digital Marketing Boot Camp

The Digital Marketing Boot Camp

Legal

Privacy Policy

Last updated: 28 October 2026

This policy explains what personal data we collect when you visit this website or buy the Digital Marketing Boot Camp, why we collect it, who we share it with, and the choices you have. If anything here is unclear, contact us — the details are in section 11.

1. Who we are

This website and the Digital Marketing Boot Camp are operated by ODD E COMMERCE L.L.C-FZ ("we", "us", "our"), a company registered in Dubai, United Arab Emirates.

Registered address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.
Website: mahdiishafiei.org · Email: [email protected] · Telephone: [PHONE].

We are the controller of the personal data described in this policy — meaning we decide why and how it is processed.

2. What we collect

Information you give us

  • Checkout details — your first name, email address and phone number, submitted on the checkout page before payment.
  • Your choices — your acceptance of our Terms and Privacy Policy, and the date and time you gave it.
  • Anything you send us — for example the content of emails or messages you send to support.

Information collected automatically

  • Technical data — your IP address, browser and device type, the pages you requested, referring URL and timestamps, recorded in our hosting provider's server logs.
  • Local storage — your checkout details are held temporarily in your own browser's session storage so the form survives a page refresh. This is cleared when you close the tab or complete your purchase. Your cookie choice is stored in your browser's local storage.
  • Which link brought you here — if you arrive through one of our campaign links (for example from our Instagram bio), we keep those link parameters in your browser for up to 30 days so that, if you later sign up, we know which channel to credit. It stays on your device, is only sent to us if you submit the checkout form, and is not used to track you on other sites.

Payment information

We never see or store your card details. Payment is taken inside a secure frame operated by our payment provider, Whop. Your card number is submitted directly to Whop and its payment partners. We receive confirmation that a payment succeeded, together with the buyer's name and email and an order reference.

3. Why we use it, and our legal basis

What we doData usedLegal basis (UK/EU GDPR)
Take your order, give you access to the boot camp, and provide supportName, email, phone, order dataPerformance of a contract with you
Send you service messages about your purchase (receipt, access details, start date, lesson unlocks)Name, email, phonePerformance of a contract
Contact you if you started checkout but did not complete itName, email, phoneOur legitimate interest in recovering an abandoned purchase — you can object at any time
Send marketing emails or text messages about other offersName, email, phoneYour consent (and you can withdraw it at any time)
Keep the site secure, prevent fraud and abuse, and diagnose faultsTechnical data, server logsOur legitimate interest in protecting the service
Keep accounting and tax recordsOrder and payment recordsCompliance with a legal obligation
Prove that you gave consent or acknowledgement where requiredConsent flags with timestampsCompliance with a legal obligation, and our legitimate interest in defending claims

We do not sell your personal data, and we do not use it to make automated decisions that produce legal effects about you.

4. Who we share it with

We share personal data with the service providers below, only so far as they need it to do their job for us. Each is bound by contract to protect it.

ProviderWhat it doesData it receives
WhopPayment processing and delivery of course access. Whop acts as merchant of record for card-network and settlement purposes only; we remain the seller and supplier of the boot camp.Your name, email, payment and card data (collected directly by Whop), order records
VercelWebsite hosting, content delivery and the serverless function that receives the checkout formIP address, request and device data, server logs containing your submitted checkout details
GoHighLevel (LeadConnector)Our customer-relationship system, and the platform we use to send email and text messagesYour name, email, phone and consent flags
Meta Platforms (Facebook and Instagram)Advertising measurement on our testimonials page, through the Meta Pixel. It is loaded only if you accept marketing cookies; if you decline, no request is made to Meta at all.IP address, browser and device information, the fact that you viewed that page, and Meta's own cookie identifiers
YouTube (Google)Hosts the free first-module videos on our testimonials page. The player is only loaded after you ask for it by unlocking the module, and we use YouTube's privacy-enhanced domain, which does not set advertising cookies unless you press play.IP address, browser and device information, and what you watch of that video
Upstash (Redis)Stores our own copy of every form submission, so that a failure at our customer-relationship system cannot lose your enquiry before we have answered it. It is a backup of the same details you typed in, held alongside the anonymous click counts we keep for partner links.Your name, email, phone if you gave one, and which link brought you here
Google FontsServes the typeface used on this site. Your browser requests the font files directly from Google, which means Google receives your IP address.IP address, browser and device information

We may also disclose personal data where we are legally required to do so, to establish or defend legal claims, or to a buyer if our business is sold or reorganised.

5. International transfers

We are based in the United Arab Emirates, and the providers listed above process data in the United States and elsewhere. Where personal data protected by UK or EU law is transferred outside the UK or EEA, we rely on the safeguards those providers put in place — typically the UK International Data Transfer Addendum or the European Commission's Standard Contractual Clauses. You may ask us for details using the contact information in section 11.

6. How long we keep it

  • Enquiries and abandoned checkouts — up to 24 months from your last interaction with us, then deleted.
  • Customer and order records — for as long as you have access to the boot camp and afterwards for as long as tax, accounting and limitation laws require, which in the UAE is generally at least 5 years.
  • Consent and acknowledgement records — for as long as needed to prove compliance, and while any claim could still be brought.
  • Server logs — for the short period our hosting provider retains them.
  • Marketing contacts — until you unsubscribe, and then a minimal suppression record so we do not contact you again by mistake.

7. Your rights

Depending on where you live, you may have the right to:

  • ask for a copy of the personal data we hold about you;
  • have inaccurate data corrected;
  • ask us to delete your data;
  • ask us to restrict how we use it, or object to our use of it — including any use based on our legitimate interests, and direct marketing at any time;
  • receive data you gave us in a portable, machine-readable format;
  • withdraw consent at any time, without affecting anything we did before you withdrew it; and
  • complain to a data protection authority.

To exercise any of these, email [email protected]. We will respond within one month. We may need to verify your identity first. Exercising your rights is free unless a request is manifestly unfounded or excessive.

8. Marketing and how to opt out

We only send marketing where you have agreed to it or where the law otherwise permits it. You can opt out at any time — use the unsubscribe link in any email, reply STOP to any text message, or email us. Opting out of marketing does not stop the service messages we must send about a purchase you have made.

We do not ask for marketing consent at checkout. If we ever want to send you marketing, we will ask you separately first, and you can refuse without it affecting your purchase.

9. Cookies and similar technologies

We use a small number of strictly necessary technologies — for example to remember your cookie choice and to keep your checkout details in your browser while you complete the form — and we ask before using anything else, such as the Meta Pixel described in section 4. You can change your mind at any time by reopening the cookie settings on the site or by clearing your browser storage.

10. Security, children and changes

Security. The site is served over HTTPS and payment is handled in a secure frame by our payment provider. We restrict access to personal data to people who need it. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

Children. The boot camp is intended for adults. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

Changes. If we change this policy we will update the date at the top of this page and, where the change is significant, tell you directly.

11. How to contact us or complain

Email [email protected], call [PHONE], or write to Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.

If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to your local data protection authority — in the UK the Information Commissioner's Office (ico.org.uk), in the EU your national supervisory authority, and in the UAE the UAE Data Office.

ODD E COMMERCE L.L.C-FZ
Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates · [PHONE] · [email protected]

© 2026 · The Digital Marketing Boot Camp