Privacy, handled with care.

Design Slices is the controller of the personal data described in this policy.

Contact: Design Slices, Sharjah, United Arab Emirates
Email: designslicesbusiness@gmail.com
Phone: +971 54 474 8569

This policy applies to:

• visitors to the Website;
• people who contact us through the contact form, email, phone, or social media;
• prospective clients and clients who enquire about or use our services.

It does not apply to:

• third-party websites we link to;
• personal data we process on behalf of a client under a separate written agreement. In that case, the client is the controller and their privacy policy applies.

“Personal data” means information that identifies you or can reasonably be used to identify you.

Information you give us

When you use the contact form or email us:

• name;
• email address;
• phone number;
• project type (optional);
• subject;
• message and any information you choose to include;
• any attachments you send by email.

We do not collect payment card details through the Website. Payments are arranged separately.

Information collected automatically

When you visit the Website, our hosting and security provider may process:

• IP address;
• browser type and version;
• device type and operating system;
• pages visited, time spent, and referring URL;
• approximate location derived from IP address;
• date and time of requests;
• technical security signals used to distinguish humans from bots.

We use this to keep the Website secure, diagnose problems, and understand aggregate usage. We do not use it to identify you personally.

Information from other sources

We do not buy personal data. If you contact us through a social network or referral, we may receive your name and contact details from that platform or person.

The Website does not save contact form submissions to a database. When you submit the form:

1. the information is sent over an encrypted HTTPS connection to our hosting provider, Cloudflare;
2. it is validated and checked for spam using technical anti-abuse measures;
3. it is sent as an email over encrypted SMTP (TLS) through Google’s Gmail service to our business Gmail inbox;
4. the email is sent from and to the same Gmail address, with your email address set as the reply-to address;
5. we reply to you by email or phone.

The email remains in our Gmail account until we delete it. Google processes and stores the email on our behalf under its terms. If we begin working together, we may also save the enquiry in our project records.

Please do not send sensitive personal data through the form, including health, biometric, religious, political, financial account, or government ID information. If you need to share something sensitive for a project, contact us first so we can arrange a secure method.

Where we rely on legitimate interests, we balance our interests against your rights and freedoms. You can object at any time. Where we rely on consent, you can withdraw it at any time without affecting processing already carried out.

We do not use your data for automated decision-making that produces legal or similarly significant effects. We do not send marketing emails unless you ask us to or consent separately. We do not sell or rent personal data.

We do not use advertising cookies, cross-site tracking cookies, or behavioural profiling. We do not track you across other websites.

Our hosting and security provider, Cloudflare, may set strictly necessary cookies to protect the Website, such as cookies that distinguish humans from bots and remember security challenges. These are required for the Website to function securely.

We use Cloudflare Web Analytics, which is cookieless and provides aggregate statistics without identifying individual visitors. We do not use Google Analytics, Meta Pixel, or advertising scripts.

You can block or delete cookies in your browser. If you block strictly necessary cookies, some security features may not work.

Because we currently use only strictly necessary cookies and cookieless aggregate analytics, we do not show a cookie consent banner. If we add non-essential cookies or tracking tools in future, we will update this policy and ask for consent where required.

We share personal data only as needed:

• Google (Gmail) — to receive, send, and store enquiry emails.
• Cloudflare — to host, serve, and secure the Website, and for aggregate analytics.
• Professional advisers — lawyers, accountants, and insurers, when necessary.
• Authorities — when required by law, court order, or to protect our rights, safety, or property.
• A buyer or successor — if we sell or transfer the business, subject to this policy.
• Anyone you ask us to share with — at your direction.

We do not sell or rent personal data, and we do not share it with third parties for their own marketing.

We are based in the UAE. Google and Cloudflare operate globally, so your data may be processed in the UAE, the European Economic Area, the United Kingdom, the United States, and other countries where they operate.

Where we transfer personal data internationally, we do so in accordance with applicable law and use appropriate safeguards. These include provider terms, standard contractual clauses, adequacy decisions where applicable, and, where required, your consent. You can contact us for more information about the safeguards we use.

• Enquiries that do not become projects: up to 24 months from our last contact, then deleted.
• Client and project records: for the duration of the relationship and for as long as needed afterwards for legal, tax, and accounting purposes (typically five to seven years).
• Technical and security logs: kept for a limited period under our providers’ terms, unless needed to investigate a security incident.
• Aggregate analytics: not linked to individual visitors and kept only as aggregate statistics.
• Backups: our email provider may keep backups for a limited period after we delete an email.

We use reasonable technical and organisational measures, including:

• encrypted HTTPS connections between your browser and the Website;
• encrypted SMTP (TLS) between the Website and Gmail;
• no database of contact form submissions;
• access limited to authorised personnel;
• strong, unique passwords and multi-factor authentication on our email and hosting accounts;
• keeping the Website and its dependencies updated;
• spam and abuse controls;
• reviewing our providers’ security and privacy terms;
• confidentiality obligations for anyone who assists us.

We review these measures as the business grows.

A personal data breach is a security incident that leads to accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.

If we become aware of one, we will:

1. investigate and take steps to contain and remedy it;
2. assess the likelihood and severity of the risk to affected people;
3. notify the UAE Data Office without undue delay and, where feasible, within 72 hours of becoming aware, where the law requires it;
4. notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms;
5. notify other regulators, such as an EU/EEA supervisory authority or the UK Information Commissioner’s Office, where the GDPR or UK GDPR applies;
6. notify affected clients where we were processing data on their behalf;
7. document the incident, its effects, and the action taken.

We may need to share information with authorities, insurers, and advisers to handle the incident. We will not publicly identify affected individuals unless necessary.

We take security seriously, but no method of transmission over the internet and no method of electronic storage is completely secure. We cannot promise that our systems, or those of our providers, will never be compromised, or that data will never be intercepted, corrupted, or lost.

The main risks outside our control include:

• attacks on, or failures of, third-party infrastructure and services, including Google, Cloudflare, and internet providers;
• malicious or hostile acts such as hacking, phishing, credential theft, or denial-of-service attacks;
• the security of your own device, network, browser, or email account;
• events beyond our reasonable control.

To the extent permitted by applicable law, we are not responsible for a security incident caused by these factors, provided we have implemented appropriate technical and organisational measures and have complied with our legal obligations, including breach notification.

Nothing in this policy excludes or limits any liability that cannot be excluded or limited by law. This includes liability for our own acts, omissions, negligence, or breach of statutory duty, and any rights you have under mandatory data protection law.

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• delete your data;
• restrict or object to processing;
• object to direct marketing;
• receive your data in a portable format;
• withdraw consent at any time;
• not be subject to automated decision-making that produces legal or similarly significant effects;
• complain to a supervisory authority.

To exercise a right, email designslicesbusiness@gmail.com. We may ask for information to verify your identity. We aim to respond within 30 days or the period required by applicable law, and we will not charge a fee unless permitted by law. We will not discriminate against you for exercising your rights.

You are not required to provide personal data. However, if you do not provide the information requested in the contact form, we cannot respond to your enquiry.

UAE: You can complain to the UAE Data Office.
EU/EEA: You can complain to your local data protection authority.
UK: You can complain to the Information Commissioner’s Office (ICO).

Please help us protect your data:

• provide accurate information;
• do not send sensitive personal data through the form or ordinary email;
• keep your own device, browser, and email account secure;
• tell us promptly if you believe your email account or our correspondence has been compromised;
• do not use the form to send unlawful, abusive, or malicious content.

The Website and our services are intended for businesses and adults. We do not knowingly collect personal data from children under 18. If you believe a child has sent us personal data, contact us and we will delete it.

The Website may link to third-party websites and social media platforms. We are not responsible for their privacy practices. Read their privacy policies before sharing personal data with them. If you contact us through a social platform, that platform’s privacy policy also applies to its own processing.

When we provide services to a client, we may process personal data on the client’s behalf under a separate agreement. In that situation, the client is the controller and their privacy policy applies. We process that data only on the client’s documented instructions, unless the law requires otherwise.

If the California Consumer Privacy Act (as amended by the CPRA) applies to us, you may have the right to know, delete, correct, or opt out of the sale or sharing of your personal information, and to not be discriminated against for exercising those rights.

We do not sell or share personal information for cross-context behavioural advertising, and we do not knowingly sell or share the personal information of consumers under 16.

To make a request, email designslicesbusiness@gmail.com. We will verify your request and respond within the time required by law. You can use an authorised agent to submit a request on your behalf.

We do not share personal information with third parties for their direct marketing purposes.

We do not track visitors across third-party websites, so we do not respond differently to browser Do Not Track signals.

We may update this policy to reflect changes in our practices or the law. We will post the updated version on this page and change the “Last updated” date. If the changes are material, we will take reasonable steps to notify you.

Design Slices
Sharjah, United Arab Emirates
Email: designslicesbusiness@gmail.com
Phone: +971 54 474 8569
Website: designslices.com

This policy is governed by the laws of the United Arab Emirates. Any dispute is subject to the jurisdiction of the courts of Sharjah, UAE, without prejudice to any mandatory rights you have under the law of your country of residence.

This policy is a transparency notice. It does not create contractual rights beyond those required by law, and it does not limit any rights you have under mandatory data protection law. If any provision is found unenforceable, the remaining provisions will continue to apply.