Privacy Policy

When you visit the site

Our hosting provider automatically logs technical access data: IP address, browser type, operating system, referring URL, and time of visit. This data is used solely for the secure and stable operation of the website and is not used to identify individual visitors. Legal basis: Art. 6(1)(f) GDPR — legitimate interest.

When you subscribe to the newsletter

We collect your name (if provided) and email address. We use ActiveCampaign to manage our mailing list and send the newsletter. Your data is transferred to and stored on ActiveCampaign servers in the United States. ActiveCampaign participates in the EU–US Data Privacy Framework. You can unsubscribe at any time using the link in any email we send. Legal basis: Art. 6(1)(a) GDPR — your consent.

When you contact us

If you send us an email or use a contact form, we store your message and contact details for as long as necessary to respond and follow up. We do not share this data with third parties. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in responding to correspondence.

Analytics

We use Google Analytics to understand how visitors use this site. Google Analytics sets cookies and transmits anonymised usage data to Google LLC servers in the United States. Google LLC participates in the EU–US Data Privacy Framework. This data collection only occurs with your consent, which you can give or withdraw via the cookie banner. Legal basis: Art. 6(1)(a) GDPR — your consent.

Third-party services

This site uses the following third-party services. Each has its own privacy policy which governs how they handle data:

• ALL-INKL.COM (hosting) — Privacy policy
• ActiveCampaign (newsletter) — Privacy policy
• Google Analytics (analytics) — Privacy policy
• YouTube (embedded video) — Privacy policy
• Vimeo (embedded video) — Privacy policy

When you watch an embedded video, a connection is established with YouTube or Vimeo servers. They may receive your IP address and information about your visit. We use YouTube's enhanced privacy mode and Vimeo's Do Not Track setting wherever possible to limit data collection before you press play.

Data transfers outside the EU

Some of the services we use transfer data to the United States. Where this occurs, we rely on the EU–US Data Privacy Framework, Standard Contractual Clauses approved by the European Commission, or other appropriate safeguards as required by GDPR Chapter V.

How long we keep your data

• Newsletter subscribers: until you unsubscribe
• Contact enquiries: until the matter is resolved, typically no longer than two years
• Server log data: typically 7–14 days, as set by our hosting provider
• Analytics data: as configured in Google Analytics (default: 14 months)

Your rights

Under the GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data where there is no longer a lawful basis to hold it
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — at any time, for processing based on consent (this does not affect the lawfulness of prior processing)
• Lodge a complaint — with your national data protection authority

To exercise any of these rights, write to us at web@shaitubali.com. We will respond within 30 days.

Changes to this policy

We may update this policy when our practices change or when required by law. The date at the top of this page reflects when it was last revised. Continued use of the site after an update constitutes acceptance of the revised policy.