Icon
Back to home page

Privacy Policy

Updated date: Jun 05, 2026

This Privacy Policy explains how Better Brain Lab LLC ("Better Brain Lab," "we," "us," or "our") collects, uses, and protects personal information when you visit hesham.us (the "Site") or contact us through it.

Better Brain Lab LLC is the data controller responsible for your personal information.

  • Contact email: privacy@hesham.us
  • Postal address: 20289 Stevens Creek, Cupertino, CA 95014

If you have questions about this policy or how we handle your data, contact us using the details above.

1. Scope

This policy applies to personal information we collect through the Site and related communications (email, scheduling, enquiry forms). It does not cover third-party websites or services we link to, which have their own privacy policies.

2. Information we collect

Information you provide to us:

  • Enquiry / contact form: your name, email address, and message, plus any optional details you choose to add (such as your company, brand or channel, links to your content, and a budget range).
  • Scheduling: when you book a call, information you provide through our scheduling provider (name, email, meeting details, and anything you add in the booking questions).
  • Correspondence: information contained in emails or messages you send us, and any materials you share with us about a project.

Information we collect automatically:

  • Technical and usage data: IP address, browser type, device information, referring pages, pages viewed, and approximate location, collected via our hosting provider, CDN, and (if enabled) analytics.
  • Cookies and similar technologies: see our Cookie Policy for details.

We do not intentionally collect special categories of data (e.g., health, religion) through the Site. Please do not submit sensitive personal information through our forms.

3. How we use your information

We use personal information to:

  • respond to your enquiries and provide information you request;
  • schedule and conduct discovery calls and meetings;
  • provide, manage, and improve our services and the Site;
  • communicate with you about your enquiry or a project;
  • maintain the security and integrity of the Site;
  • comply with legal obligations; and
  • send marketing communications only where you have consented, and you can opt out at any time.

4. Legal bases for processing (EEA/UK)

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:

  • Consent — e.g., optional marketing, and non-essential cookies.
  • Performance of a contract / steps prior to a contract — e.g., responding to your enquiry, scheduling a call, delivering services.
  • Legitimate interests — e.g., operating and securing the Site, understanding how it is used, and responding to communications, where those interests are not overridden by your rights.
  • Legal obligation — where we must process data to comply with the law.

5. Cookies and tracking

The Site uses cookies and similar technologies. For details on what we use and how to manage them, see our Cookie Policy. Where required, we request your consent before setting non-essential cookies.

6. How we share information

We do not sell your personal information. We share it only as follows:

  • Service providers / processors who help us operate the Site and our business, including:
    • Webflow — website hosting and content management;
    • Cloudflare — content delivery, DNS, and security;
    • [Scheduling provider — e.g., Cal.com] — booking and scheduling;
    • [CRM / email provider] — managing enquiries and correspondence;
    • [Notification tools — e.g., Slack / Telegram] — internal alerts when you submit an enquiry;
    • [Analytics provider — e.g., Google Analytics 4 / Plausible, if used] — understanding Site usage.
    Some enquiry data is processed on our own self-hosted infrastructure (servers we operate in the United States and Germany) using our internal automation tooling.
  • Legal and safety — where required by law, regulation, or legal process, or to protect rights, safety, and property.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

7. International data transfers

We are based in the United States and operate infrastructure in the United States and Germany. Your information may be transferred to, stored in, or processed in countries other than your own. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

8. Data retention

We keep personal information only as long as necessary for the purposes described in this policy — for example, to respond to your enquiry, deliver services, and meet legal, accounting, or reporting requirements — after which we delete or anonymise it.

9. Security

We use reasonable technical and organisational measures to protect personal information, including encryption in transit, access controls, and self-hosted infrastructure we control. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Depending on where you live, you may have some or all of the following rights:

EEA / UK (GDPR): access; rectification; erasure; restriction of processing; data portability; objection to processing; and withdrawal of consent at any time. You also have the right to lodge a complaint with your local data protection authority.

California (CCPA/CPRA): the right to know what personal information we collect and how we use it; to request deletion; to request correction; to opt out of the "sale" or "sharing" of personal information (we do not sell or share personal information as defined by the CCPA); and not to be discriminated against for exercising your rights.

To exercise any right, contact us at privacy@hesham.us. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.

11. Children's privacy

The Site is not directed to children, and we do not knowingly collect personal information from anyone under the age of 16 (or the minimum age in your jurisdiction). If you believe a child has provided us with personal information, contact us and we will delete it.

12. Third-party links

The Site may link to third-party websites and services (for example, our scheduling page, social media, product stores, or other properties we operate). We are not responsible for the privacy practices of those third parties; please review their policies.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date. Significant changes may be communicated by additional notice where appropriate.

14. Contact us

Call Icon
+1-888-669-1935