SITE GOVERNANCE / PRIVACY

Privacy Notice

This notice explains the limited personal data that may be handled when you visit sinaestavi.com, use an external service linked from it or contact Sina Estavi through an official channel.

Last updated
26 July 2026
Controller
Sina Estavi
Applies to
sinaestavi.com

At a glance

What should be clear from the start.

  1. 01

    This is a public information site. It has no visitor accounts, newsletter, checkout or on-site contact form.

  2. 02

    No analytics, advertising or behavioural-profiling tools are currently installed by this site.

  3. 03

    Limited technical data may be processed to deliver, secure and troubleshoot the site. Third-party rules apply when you choose to use an embedded service or external platform.

01

Who is responsible

Sina Estavi is the controller of personal data handled directly for this official website. The site is operated from the United Kingdom as a personal, professional and public-record website.

For a privacy question or rights request, use one of the verified routes on the Official Contact page and begin the message with “Privacy request”. Do not send passports, payment details or other sensitive documents unless they are specifically and securely requested.

02

Information that may be handled

Simply reading the site does not create a profile or an account. The site itself does not ask for your name, email address or payment information.

The hosting, content-delivery and security infrastructure may process routine request data such as an IP address, request time, requested URL, browser or device information, referring page and diagnostic or security events. This is ordinary technical data used to return a page and protect the service.

If you contact Sina Estavi through X, LinkedIn, Facebook or Telegram, the chosen platform processes the interaction under its own terms. Sina Estavi may receive your account name, profile information, message, attachments and any contact details you choose to provide.

If you submit a correction, response or evidence, the material may contain personal data about you or other people. Only information relevant to assessing the submission should be provided.

Editorial and public-record pages may also identify people mentioned in public documents, attributable reporting, direct statements or material submitted for review. The source, status and public-interest relevance of that information are assessed under the Editorial & Evidence Standards.

You are not required to provide personal information to read the site, and the site does not make solely automated decisions or create behavioural profiles about visitors. If a message or correction request lacks enough information to understand or verify it, a useful response may not be possible.

03

Why information is used

Where UK data-protection law applies, routine technical and correspondence data is generally handled on the basis of legitimate interests: delivering and securing the site, diagnosing faults, answering genuine enquiries, protecting legal rights and maintaining an accurate public record. These interests are pursued in a limited and proportionate way.

For editorial information about identifiable people, the basis and necessity are assessed in context. This may include legitimate interests in maintaining an accurate public record, freedom of expression, public-interest publication and legal claims. Any legal exemption is considered for the particular processing; this notice does not claim a blanket journalism exemption.

Some public-record material may concern alleged offences, investigations, proceedings or convictions. Where that material is criminal-offence data under Article 10 of the UK GDPR, Article 6 alone is not sufficient. Continued processing therefore requires a route permitted by UK law, including any applicable Data Protection Act 2018 condition or exemption, to be identified and documented for the specific processing. This notice does not itself select or replace that case-specific legal assessment.

Information may also be handled to comply with a legal obligation, respond to a lawful request or establish, exercise or defend legal claims. If an optional feature later requires consent, consent will be requested before that processing begins where the law requires it.

You have the right to object to processing based on legitimate interests. An objection will be considered against the reasons and legal basis for the processing.

04

Cookies, storage and third-party content

The current site does not intentionally use analytics, advertising, personalisation or social-tracking cookies. Essential hosting or security mechanisms may use limited storage or access where necessary to deliver and protect the service.

The CryptoLand and BRG evidence page offers a video from YouTube using YouTube’s privacy-enhanced domain. The player does not connect to YouTube until you choose to load it. After that choice, Google or YouTube may receive technical information and may use storage or access technologies under their own policies. The same report can be opened through the ordinary source links without loading the embedded player.

External links take you to services that are not controlled by this site. Their privacy notices and settings apply once you leave sinaestavi.com.

If non-essential analytics, advertising or comparable technology is introduced later, this notice will be updated and a consent choice will be provided before use where required.

05

Sharing and international processing

Personal data is not sold or rented. Limited data may be available to providers that host, deliver, secure or troubleshoot the site; to a platform you choose for contact; to professional advisers where necessary; or to authorities and other parties where disclosure is required or lawfully justified.

Some service providers and social platforms operate internationally. Information may therefore be processed outside the United Kingdom. Any restricted transfer for which Sina Estavi is responsible must be handled under the applicable UK transfer rules. You may ask through the Official Contact page for information about the route or safeguards relevant to such a transfer. A platform you independently choose is responsible for its own international transfers.

06

Retention and security

Technical logs are kept for the limited periods applied by the relevant infrastructure provider, and may be retained longer only when needed to investigate security, abuse, faults or legal issues.

Messages and submissions are kept only for as long as reasonably needed to answer the enquiry, document an editorial decision, maintain the integrity of a correction or evidence record, resolve a dispute, or meet legal obligations. Irrelevant material should be deleted or minimised when it is no longer needed.

Reasonable technical and organisational measures are used, but no internet service or messaging platform can promise absolute security. Use the minimum amount of personal information necessary when contacting the site.

07

Your data-protection rights

Depending on the circumstances and lawful basis, you may have rights to access, correct or erase personal data, restrict its use, object to processing, receive portable data, or withdraw consent where consent is used. These rights are not absolute; lawful exceptions may apply, including for freedom of expression, public-interest publication, legal claims or the rights of other people.

A request may require proportionate identity checks so that information is not disclosed to the wrong person. A valid request will be handled within the period required by applicable law.

A valid data-protection rights request sent through an official route will be handled without undue delay and normally within one month. If the law permits an extension because a request is complex or numerous, the requester will be told within the first month and given the reason. You do not have to wait for an internal complaint process to end before contacting the ICO.

If you remain concerned, you may complain to the UK Information Commissioner’s Office. The ICO recommends raising the issue with the controller first where practical.

08

Children and changes to this notice

This site is intended for a general audience and is not designed to collect information from children. Do not submit personal information about a child unless it is genuinely necessary, lawful and appropriately authorised.

This notice will be reviewed when the site’s features, providers or legal obligations materially change. The date at the top identifies the current version. Material new uses of personal data will be explained before they begin where required.