Privacy, in plain words.

This site belongs to Muhammad Raza (RZ), an independent designer and developer based in Dubai, United Arab Emirates. I decide how the personal data described here is used, and I’m the person to contact about it: generalraza2099@hotmail.com.

This policy follows the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the PDPL).

When you start a project through the contact form: your name, email address, the services you’re interested in, a short description of your business, your budget range, your timeline and any notes you add.

When you email me directly: your email address and whatever you choose to write.

Technical logs: like any website, the hosting provider automatically records basic request data (IP address, browser type, pages requested and the time) to keep the site secure and working. These logs are kept for a short time.

Nothing else. There are no cookies, no analytics, no advertising pixels and no third-party trackers. The fonts are served from this site, not from an outside font service.

The site uses your browser’s session storage for three small conveniences: keeping your contact form answers if you refresh mid-way, remembering whether you’ve filled the paint wall in The Garage, and restoring your scroll position. This stays on your device, is never sent to me, and is cleared when you close the tab.

I use your enquiry only to reply to you, understand your project and, if you ask me to, prepare a proposal and work with you. This is processing you’ve asked for, as steps before a possible contract, and by sending the form you consent to it.

I don’t use your details for marketing, I don’t add you to a mailing list, and I never sell or rent personal data.

A small number of service providers process data on my behalf, only to run this site and deliver your message:

• Vercel: hosts the website and its technical logs.
• Resend: delivers contact form submissions to my inbox.
• My email provider: stores our correspondence.

Some of these providers store data outside the UAE (for example in the United States or the European Union). Where that happens, I rely on providers that commit to appropriate safeguards for personal data, as the PDPL requires for cross-border transfers.

I’ll only share your data with anyone else if the law requires it.

Enquiries that don’t turn into a project are deleted within 24 months of our last contact. If we work together, I keep project correspondence for as long as the work lasts and afterwards for as long as UAE law requires me to keep business records. You can ask me to delete your enquiry sooner at any time.

Under the PDPL you can ask me to:

• tell you what personal data I hold about you and give you a copy;
• correct anything that’s wrong or incomplete;
• delete your data, or stop or restrict how I use it;
• send your data to you, or to someone else, in a usable format;
• withdraw your consent at any time (this doesn’t affect anything done before you withdrew it).

Email generalraza2099@hotmail.com and I’ll respond within 30 days. If you’re not happy with my answer, you can complain to the UAE Data Office.

The site is served only over an encrypted (HTTPS) connection, the contact form is protected against spam and abuse, and access to enquiries is limited to me. No method of transmission or storage is completely secure, but I take reasonable care to protect your data.

This site is meant for businesses and adults. I don’t knowingly collect personal data from anyone under 18.

If I change how I handle personal data, I’ll update this page and the date at the top. Questions about any of it? Email generalraza2099@hotmail.com.