Privacy Policy

This Privacy Policy explains how SiteForge collects, uses, discloses, and protects personal data. SiteForge is the controller responsible for personal data processed in connection with SiteForge’s website and services.

Privacy enquiries may be sent to mouhannadnwilati@gmail.com or to Office 705, Building 12, Bay Square, Business Bay, Dubai, United Arab Emirates.

2.1 Enquiries and proposals. Names, business names, email addresses, telephone numbers, project requirements, budgets, preferred start dates, and information included in correspondence or forms.

2.2 Owner account data. Authentication identifiers, email addresses, account status, and access-role information for authorised SiteForge owners and administrators.

2.3 Payment metadata. Invoice references, payment status, amount, currency, Stripe customer and transaction references, subscription status, and limited billing information. Full card numbers and card security codes are processed directly by Stripe and are never stored by SiteForge.

2.4 Usage and analytics data. First-party events such as page views, form submissions, checkout actions, referral information, approximate device and browser details, and technical logs used to understand and secure the service.

2.5 Communications. Messages, attachments, feedback, support requests, review submissions, and records of emails or other communications with SiteForge.

3.1 Contract. Personal data is processed where necessary to prepare quotations, accept orders, deliver Services, issue invoices, administer Care Plans, provide support, and communicate about a contract or requested pre-contractual steps.

3.2 Legitimate interests. Data may be processed to operate and improve the website, measure service performance, prevent fraud and misuse, protect systems, maintain business records, respond to enquiries, and establish or defend legal claims, where those interests are not overridden by your rights.

3.3 Consent. Where required, consent is requested for optional communications or other processing. Consent may be withdrawn at any time without affecting processing already carried out lawfully.

3.4 Legal obligations. Data is also processed where necessary to comply with accounting, tax, regulatory, court, and other legal requirements.

Card payments and recurring subscriptions are processed by Stripe. Stripe receives the payment and identity information required to process the transaction, prevent fraud, and comply with financial regulation. SiteForge receives transaction references and status information but does not receive or retain full card details.

Stripe processes personal data under its own terms and privacy practices. Further information is available in Stripe’s Privacy Policy.

SiteForge uses essential first-party storage and cookies where needed for authentication, security, preferences, checkout continuity, and core website functions. Privacy-respecting first-party event tracking is used to understand page usage and key actions such as enquiries and checkout starts.

SiteForge does not use third-party advertising trackers or sell behavioural profiles for advertising. Browser settings may be used to block or delete cookies, although essential functions may then operate incorrectly.

Personal data is shared only where reasonably necessary with service providers acting for SiteForge, including Stripe for payments, hosting and technical infrastructure providers, email-delivery providers, professional advisers, and contractors involved in delivering the Services. These recipients are required to protect data and use it only for the relevant purpose.

Data may also be disclosed where required by law, court order, or competent authority, or in connection with a corporate restructuring or transfer subject to appropriate protections. SiteForge does not sell or rent personal data.

Some service providers process data outside the United Arab Emirates. Where personal data is transferred internationally, SiteForge uses providers and safeguards intended to ensure an appropriate level of protection, including contractual protections and recognised transfer mechanisms where applicable.

Personal data is retained only for as long as necessary for the purpose for which it was collected, to maintain service and project records, and to meet legal, tax, accounting, and dispute-resolution requirements. Invoices and supporting tax records are retained for at least five years where required by UAE tax law, and longer where another applicable requirement or active dispute makes this necessary.

Unsuccessful enquiry and proposal data is periodically reviewed and deleted or anonymised when no longer reasonably required. Technical and analytics records are retained for a proportionate operational period.

SiteForge applies reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, loss, disclosure, or destruction. Measures include access controls, restricted administrative permissions, encrypted connections, managed infrastructure, and minimisation of stored payment data.

No internet service can guarantee absolute security. You should use secure communication channels and notify SiteForge promptly if you suspect unauthorised use of your information.

Subject to applicable law and relevant exemptions, you may request access to personal data, correction of inaccurate data, deletion, restriction, transfer, or objection to certain processing. You may also withdraw consent where processing relies on consent.

Rights are administered in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and, where applicable to a Client or individual in the European Union or United Kingdom, the relevant GDPR requirements. SiteForge may request reasonable proof of identity before acting on a request and will respond within the period required by applicable law.

The website and Services are intended for businesses and persons aged 18 or over. SiteForge does not knowingly collect personal data from children. If such data is identified, it will be deleted unless retention is legally required.

This Privacy Policy may be updated to reflect changes in law, technology, service providers, or business practices. The revised policy will be published on this page with an updated effective date. Material changes may also be communicated directly where appropriate.

Privacy questions and rights requests may be submitted to mouhannadnwilati@gmail.com. Please identify the nature of the request and provide enough information for SiteForge to locate the relevant records.