Privacy Policy

This Privacy Policy explains how Sahir Studio ("we", "us", "our") collects, uses, and protects information you provide when using sahir.studio. We take your privacy seriously and collect only what is necessary to operate this business.

1. Information We Collect

Contact and commission forms. When you submit a message or commission enquiry, we collect your name, email address, phone number (if provided), and the content of your message. This information is transmitted via FormSubmit.co to our business email address and is not stored on our servers.

Payment information. Payments are processed by Stripe, Inc. We do not collect or store your card details. Stripe's privacy policy governs how payment data is handled: stripe.com/privacy.

Order information. When you make a purchase, we receive your name, email address, and delivery address from Stripe in order to fulfil your order and arrange shipping.

Usage data. This site does not currently use analytics tracking cookies. If we add analytics in future, this policy will be updated and a cookie notice displayed.

2. How We Use Your Information

• To respond to enquiries and commission requests
• To process and fulfil orders for prints and original works
• To arrange shipping and communicate about delivery
• To send payment receipts (via Stripe)
• To comply with legal obligations

We do not use your information for marketing without explicit consent. We do not sell, rent, or share your personal data with third parties except as described in this policy.

3. Third-Party Services

We use the following third-party services, each subject to their own privacy policies:

• Stripe — payment processing (stripe.com/privacy)
• FormSubmit.co — contact form routing (formsubmit.co/privacy)
• Zoho Mail — business email (zoho.com/privacy)
• Fly.io — website hosting (fly.io/legal/privacy-policy)

4. Data Retention

Contact form submissions are retained in our email inbox for as long as necessary to handle the enquiry, and for up to 3 years for commission and transaction records. Order and payment records are retained for 7 years in accordance with accounting obligations. You may request deletion of your personal data at any time (see Section 6).

5. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to correct inaccurate data
• Right to erasure — to request deletion of your data
• Right to object — to object to processing for direct marketing
• Right to data portability — to receive your data in a portable format

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

6. Contact and Complaints

For any questions about this policy, to exercise your rights, or to make a complaint, please contact:

7. Changes to This Policy

We may update this policy from time to time. Changes will be published on this page with an updated date. Continued use of sahir.studio after changes constitutes acceptance of the updated policy.