Privacy Notice

1. About this privacy notice

This notice explains how Ghabsha Studio handles personal information collected through our website, inquiry forms, communications, and client relationships. It is effective from 7 October 2026.

Ghabsha Studio is responsible for deciding how this information is used. Privacy questions and requests can be sent to management@ghabsha.studio.

2. Information we collect

When you contact us, we may collect your name, work email, company, WhatsApp number, estimated monthly credits, requested service, selected plan, and the information in your message.

When you use our website, we may collect device and browser details, approximate location, pages viewed, referral information, and interactions with forms, links, WhatsApp, or scheduling tools. For clients, we may also process briefs, brand assets, feedback, communications, billing records, and deliverables.

3. How we use information

We use information to respond to inquiries, recommend an appropriate plan or scope, provide and improve our services, manage projects and billing, secure the website, prevent abuse, and comply with legal obligations.

We process information with your consent or another basis permitted by applicable law, including where necessary to respond to your request, perform our agreement or comply with legal obligations. Where applicable law permits reliance on legitimate business interests, we consider those interests against your privacy rights.

4. Analytics, cookies, and similar technologies

Analytics and non-essential tracking are used when enabled and, where required, subject to the user’s consent or available privacy controls. Google Analytics, Google Tag Manager, Google Ads and Vercel performance tools may process device, referral and interaction data, including form submissions and contact-link clicks, using cookies or similar technologies.

You can use any consent or privacy controls made available on the website or by the provider, and control or delete cookies through your browser settings. Blocking cookies may affect some website features. Essential security and authentication technologies may be necessary to provide requested functionality.

5. Service providers and sharing

The website uses Vercel for hosting and performance, Supabase for portfolio data and authentication, and Google Analytics, Google Tag Manager and Google Ads for measurement when enabled. Inquiry delivery and abuse-prevention services receive relevant information only when those integrations are configured and used.

We may also send inquiry details to a configured customer-relationship system. Providers receive only the information needed for their role. We may disclose information when required by law, to protect rights or safety, or as part of a business reorganisation. We do not sell personal information.

When you choose external channels such as Calendly, WhatsApp or Meta/Instagram, those providers also process information under their own privacy policies. Scheduling tools may load provider resources on our website. Campaign/referral information may accompany scheduling or contact links to help us understand your inquiry source.

6. International processing

Some providers may process information outside the country where you live. Where required, we use contractual or other appropriate safeguards for these transfers and rely on each provider’s published data-protection commitments.

7. Retention

We keep personal information only for as long as reasonably necessary for the purpose it was collected, including providing services, maintaining business and financial records, resolving disputes, enforcing agreements, and meeting legal obligations.

Retention periods vary by record type. When information is no longer needed, we delete it or anonymise it where reasonably practicable.

8. Security

We use reasonable organisational and technical measures designed to protect information, including access controls, secure service providers, validation, rate limiting, and encrypted transmission where supported. No internet transmission or storage system can be guaranteed completely secure.

9. Your choices and privacy rights

Depending on applicable law, you may ask to access, correct, delete, restrict, or receive a copy of your personal information, object to certain processing, or withdraw consent where processing relies on consent.

Email management@ghabsha.studio to make a request. We may need to verify your identity before responding. You may also unsubscribe from marketing messages using the link provided or by contacting us.

10. Marketing communications

We may use inquiry and contact details to respond to communications you request and provide relevant business follow-up, as permitted by applicable law. Promotional or marketing communications are sent only in accordance with applicable requirements, including consent where required.

You can opt out of marketing messages at any time using the supplied opt-out method or by emailing management@ghabsha.studio. Opting out does not prevent operational or service communications needed for your requests, projects or account.

11. Updates and contact

We may update this notice as our services or legal obligations change. The effective date at the top of this page shows when the current version applies.

For a privacy question, complaint, or request, email management@ghabsha.studio.