Privacy Policy

1. Introduction

This Privacy Policy explains how Amirmehdi Asghari, operating as an independent international business and infrastructure advisory consultant ("Amasghari," "I," "me," or "my"), collects, uses, discloses, and protects information obtained through amasghari.com (the "Website").

I advise governments, employers, contractors, consultants, and investors on project financing, contract management, MDB procurement, business development, and claims and disputes across multiple jurisdictions. Because visitors and clients access this Website from around the world, this Policy is written to align with generally accepted international privacy standards, including the EU/UK General Data Protection Regulation ("GDPR"), Türkiye's Law on the Protection of Personal Data No. 6698 ("KVKK"), and comparable frameworks such as the California Consumer Privacy Act ("CCPA"). Where local law grants you additional or different rights, that local law controls for your specific situation.

This Policy applies only to the Website. It does not govern personal data I process while performing a formal client engagement, which is instead addressed in the applicable signed engagement letter, consultancy agreement, or non-disclosure agreement.

2. Data Controller

The data controller responsible for the Website is:

3. Information I Collect

4. How I Use Your Information

I use the information collected to:

• Respond to inquiries and evaluate potential advisory engagements
• Perform conflict-of-interest checks before accepting an assignment
• Communicate with you about your inquiry, proposals, or ongoing matters
• Understand how visitors use the Website and improve its content and performance
• Maintain the security and proper functioning of the Website
• Comply with applicable legal, regulatory, tax, or accounting obligations
• Publish articles, insights, or portfolio material (only where content is already public or you have separately consented)

5. Cookies and Analytics

The Website uses cookies and similar technologies, including Google Analytics, to understand aggregate visitor behavior. These tools may set cookies on your device and collect information such as your IP address (which may be truncated or anonymized), pages visited, and session duration.

You can control or disable cookies through your browser settings at any time. Disabling cookies may affect the functionality of certain features, but you will still be able to browse the Website and use the contact form.

Where required by applicable law (e.g., in the EU/EEA or UK), non-essential cookies will only be activated after you provide consent via a cookie banner or equivalent mechanism.

6. Legal Bases for Processing (EU/UK/EEA Visitors)

If you are located in the European Economic Area or the United Kingdom, I rely on the following legal bases under the GDPR/UK GDPR:

• Consent — for non-essential cookies and analytics, and for any marketing communications you opt into
• Legitimate interests — to respond to inquiries, evaluate potential engagements, and maintain and improve the Website, provided this does not override your fundamental rights
• Performance of a contract or pre-contractual steps — where you are seeking to engage my advisory services
• Legal obligation — where processing is necessary to comply with applicable law

7. Sharing of Information

I do not sell, rent, or trade your personal data. I may share information with:

• Service providers who support the operation of this Website, such as hosting providers, email service providers, and analytics providers (e.g., Google Analytics), acting under appropriate confidentiality and data-processing terms
• Professional advisors (e.g., lawyers, accountants) where necessary for legitimate business purposes
• Regulators or authorities, where required by law, court order, or to protect legal rights
• Successors, in the event of a restructuring, sale, or transfer of my professional practice, subject to equivalent confidentiality protections

I do not share your inquiry content, project details, or documents with third parties for their own marketing purposes.

8. International Data Transfers

Given the international nature of my practice, information may be accessed, stored, or processed in countries other than your own — including Türkiye, EU/EEA member states, and jurisdictions where my hosting or analytics providers operate. Where I transfer personal data out of the EEA, UK, or Türkiye, I rely on appropriate safeguards recognized under applicable law, such as Standard Contractual Clauses, adequacy decisions, or KVKK-compliant transfer mechanisms, as applicable.

9. Data Retention

I retain personal data collected through the Website only as long as reasonably necessary to:

• Respond to and manage your inquiry
• Comply with legal, tax, or regulatory retention requirements
• Establish, exercise, or defend legal claims

Contact form submissions that do not result in an engagement are generally retained for a limited period and then deleted or anonymized, unless you request earlier deletion or applicable law requires longer retention.

10. Data Security

I apply reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage over the internet is completely secure, and I cannot guarantee absolute security.

11. Your Rights

Depending on your location, you may have the right to:

• Access the personal data I hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Withdraw consent at any time (without affecting prior lawful processing)
• Lodge a complaint with your local data protection authority (e.g., the KVKK Board in Türkiye, your national supervisory authority in the EEA/UK, or the relevant authority in your jurisdiction)

To exercise any of these rights, contact me at amirmehdi@amasghari.com. I will respond within the timeframe required by applicable law.

12. Confidentiality of Project Inquiries

Consistent with the fiduciary and confidentiality standards described on this Website, I treat project briefs, corporate documentation, and inquiry details as confidential business information, handled in accordance with applicable non-disclosure obligations, and I will not disclose such details to third parties except as described in this Policy or as otherwise agreed with you.

13. Children's Privacy

This Website is intended for business professionals and is not directed at individuals under the age of 18. I do not knowingly collect personal data from children.

14. Third-Party Links

The Website may contain links to third-party sites (e.g., LinkedIn, institutional partner websites). I am not responsible for the privacy practices of those third parties, and I encourage you to review their respective privacy policies.

15. Changes to This Policy

I may update this Privacy Policy from time to time to reflect changes in my practices or applicable law. The "Effective date" above indicates when this Policy was last revised. Material changes will be reflected on this page.

16. Contact

For questions about this Privacy Policy or to exercise your data protection rights, please contact: