Privacy Policy

1. Scope & Data Controller Identity

This Privacy Policy governs the processing of personal data by Nafeesa Ali | Digital Growth Studio (“we”, “us”, or “our”), operating online at nafeesaali.com.

We provide boutique web engineering, sub-second performance optimization, conversion rate optimization, and custom 24/7 AI chatbot automation for businesses in the United Arab Emirates (Dubai, Abu Dhabi, Sharjah), United Kingdom, Saudi Arabia, and globally.

2. Information We Collect

We collect information strictly necessary to fulfill inquiries, deliver development milestones, and ensure site security:

• Directly Provided Contact Details: When booking a discovery call, submitting an inquiry, or initiating a WhatsApp consultation, we receive your name, business email, phone number, company name, domain name, and project scope notes.
• Project Assets & Staging Data: Logo assets, Figma designs, catalog documents, API credentials, and brand copy provided for sprint execution.
• AI Chatbot Conversations: Inquiries sent via the on-site AI widget are processed to formulate instantaneous responses and qualify lead intent.
• Technical & Telemetry Data: IP addresses, browser agents, device screen resolutions, and Core Web Vitals telemetry (LCP, CLS, INP) used to ensure sub-2s performance across UAE and international ISPs.

3. Purpose & Legal Basis for Processing

Under UAE Data Protection Law and the GDPR, we process personal data based on legitimate business grounds:

• Contractual Performance: Providing fixed-scope proposals, executing 50/50 milestones, deploying custom code to staging, and providing 30-day post-launch warranty support.
• Legitimate Interests: Monitoring website uptime, preventing malicious bot abuse, and calculating accurate currency estimates (AED / USD).
• Consent: When you voluntarily submit an inquiry or opt-in to optional analytics cookies.

4. Cookies & Tracking Technologies

We adhere to a strict minimal-cookie philosophy. Our site utilizes:

• Strictly Necessary Cookies: Preserving session state, currency preferences (AED/USD), and cookie consent status in your browser’s local storage.
• Performance Telemetry: Anonymized Core Web Vitals timings to guarantee sub-2-second page loads.
• No Ad Remarketing Pixels: We do not deploy intrusive third-party cross-site advertising trackers or sell audiences to third-party ad networks.

5. Infrastructure & Trusted Subprocessors

To deliver reliable, sub-second experiences worldwide, we partner exclusively with verified tier-1 enterprise infrastructure providers:

• Cloud Hosting & Edge Delivery: Hostinger / Cloudflare SSL with TLS 1.3 encryption and DDoS mitigation.
• Direct Communication: WhatsApp Business API (Meta Platforms Inc.) for instantaneous inquiry notifications and client sprint updates.
• Live Support Chat: Tidio live chat for on-site client assistance.

6. Security & Data Retention

We implement bank-grade encryption protocols (TLS/SSL), strict SSH key authorization, and multi-factor authentication on all production servers.

Project files and inquiry logs are retained for the duration of the engagement plus a standard 12-month post-warranty period to assist with future version upgrades or warranty verifications, after which inactive staging instances are securely wiped.

7. Your Rights & Choices

Regardless of your geographic location, you retain the right to:

• Request a full export copy of your personal data on file.
• Request correction or rectification of any incomplete information.
• Request immediate and permanent erasure of your inquiry history and staging environments (“Right to be Forgotten”).
• Withdraw consent to optional analytics cookies at any time via the on-site Cookie Settings modal.

8. Contact & Data Protection Inquiries

For any privacy inquiries, data subject access requests, or security disclosures, please reach out directly: