Privacy Policy

Information we collect

• Contact form: your name, your phone number or email, your business name (optional) and your message.
• WhatsApp and email: the messages you send us and your phone number or email address.
• Payments: Stripe collects your card details on its own secure page. We never see or store your full card number. We keep your name, email, business name, phone number (if you give it), what you paid for, the amount and the payment status.
• Analytics, only if you accept cookies: the pages you visit, your approximate location (country and city), your device and browser type, and how you found us, through Google Analytics.
• Technical data: like any website, our hosting and network providers process your IP address and browser details to deliver pages and keep the site secure.

Businesses we contact

We look for businesses that don't have a website yet, using public listings on Google Maps and OpenStreetMap. We may store a business's public details (name, category, address, phone number, opening hours, rating and any existing website) so we can prepare a free demo website and contact the business about it.

Demo pages are shared by private link, are not indexed by search engines, and expire after a set time. If you'd like us to delete your business's details or stop contacting you, message us and we will.

How we use your information

• To reply to your messages and prepare quotes and demos.
• To build, host and support the websites and care plans you buy.
• To take payments, send receipts and manage subscriptions.
• To understand how the site is used and improve it (only with your consent).
• To protect the site and meet our legal, tax and accounting obligations.

We don't sell your information, and we don't use it for advertising.

Legal bases (visitors in the EU and UK)

• Consent: analytics cookies. You can withdraw it at any time.
• Contract: delivering the services you buy and taking payment.
• Legitimate interests: replying to enquiries, contacting businesses about a website, and keeping the site secure.
• Legal obligation: keeping payment and accounting records.

Cookies and similar technologies

• Language: a cookie named "locale" remembers whether you chose English or Arabic, for one year. It's needed for the site to work, so we don't ask for consent.
• Your cookie choice: saved in your browser's local storage so we don't ask you again.
• Google Analytics: sets cookies whose names start with "_ga", only after you click Accept. You can change your choice at any time with the "Cookie settings" link at the bottom of the home page. If you reject, these cookies are removed.
• Cloudflare Web Analytics: counts visits without cookies and without following you across other websites.
• Stripe: sets its own cookies on its payment pages for security and fraud prevention.

Who we share it with

We share information only with the service providers that help us run Shilla Studio, and only what they need:

• Stripe, for payments and subscriptions.
• Google, for Google Analytics (only with your consent).
• Cloudflare, for network delivery, security and cookieless visit counts.
• WhatsApp (Meta), when you message us on WhatsApp.
• Our hosting and email providers, to run the site and our inbox.

We may also share information when the law requires it.

International transfers

Some of these providers process data outside your country, including in the United States. Where that happens, they protect it with safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

• Messages and enquiries: up to 2 years after our last contact, unless you become a client.
• Client and payment records: as long as tax and accounting laws require.
• Analytics data: 14 months.
• Business listing details: until we no longer need them for outreach, or sooner if you ask us to delete them.

Your rights

You can ask to see the information we hold about you, correct it, delete it, or object to how we use it, and you can withdraw consent at any time. Email [email protected] and we'll reply within 30 days. You can also complain to your local data protection authority.

Security

The site runs over HTTPS, payments are handled by Stripe, and access to our records is limited to us. No system is perfectly secure, but we take reasonable steps to protect your information.

Children

Our services are for businesses. We don't knowingly collect information from children under 16.

Changes to this policy

If we change this policy, we'll update the date at the top of this page.

Contact

Email [email protected] or message us on WhatsApp at +971 50 674 5987.