Last updated: 21 September 2026
We collect the minimum needed to do the work you hired us for: your name, email, phone, and company for the account and for delivery; payment records (handled by Stripe for card payments in pounds sterling, and by Geidea for payments in Saudi riyals; we never see or store your full card number); and basic usage data from this site so we can see what is working. If you email us, we keep the email. That is the list.
To deliver the service you paid for, manage your account, process payments, meet our legal obligations, and, only if you asked us to, send you occasional updates. You can stop those at any time with one click in any email or one line to [email protected]. We do not sell data. We do not share it with third parties except the processors listed below.
Client data lives on our own infrastructure hosted by ISO 27001-certified providers in Germany, and with Stripe (payment records, US) under the Standard Contractual Clauses. Data in transit is encrypted with TLS 1.3. Payment card data never touches our systems; Stripe holds it under PCI DSS.
We keep engagement records for the life of the work plus 24 months (accounts and dispute purposes), then delete or anonymise them. You can ask us to delete sooner and we will, unless the law requires us to keep something.
Under UK GDPR and the Data Protection Act 2018 you can ask us for a copy of your data, correction, deletion, restriction, or portability, and you can object to marketing at any time. Saudi residents hold equivalent rights under the Saudi PDPL. Email [email protected] and we answer within 30 days, usually much sooner.
Essential cookies keep you logged in. Analytics cookies are opt-in. No third-party advertising trackers.
This policy follows the laws of England and Wales. Our UK regulator is the Information Commissioner's Office. For clients in Saudi Arabia we also comply with the Saudi Personal Data Protection Law as supervised by SDAIA.
Data Protection Officer: Yassin Osman, CEO. Email [email protected] for formal data-protection matters; [email protected] acknowledges every request within seconds and routes it to us instantly. SIKRITS LIMITED, London, United Kingdom. If you are unhappy with how we handled your data, you can complain to the ICO (ico.org.uk). But we would rather you told us first and gave us the chance to fix it.