Privacy Policy

nThreads Studios ("we", "us", the "Controller") operates nthreads.com. We are established in the United Arab Emirates and process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its Executive Regulation, and — where it applies to visitors from the EU/EEA and UK — the GDPR and UK GDPR. This policy explains what we collect, why, who we share it with, and your rights. We collect very little.

What we collect and why

Contact form. Name, email address, and message, plus any company name or phone number you choose to provide. Your IP address is included in the notification email we receive, to help us filter spam. We use this data solely to respond to your inquiry and take steps toward a potential engagement at your request.

Analytics. We use Google Analytics 4 to understand how the site is used (pages visited, approximate location, device type). Analytics cookies are set only with your prior consent via the cookie banner. If you decline, no analytics cookies are stored and your visits are not tracked. You can withdraw consent at any time by clearing your cookies; the banner will ask again.

Call booking. After submitting the contact form you can optionally book a call via Cal.com, embedded on our thank-you page. Data you enter there (name, email, selected time) is processed by Cal.com under Cal.com's privacy policy.

Theme preference. Your light/dark choice is stored locally in your browser (localStorage) and never leaves your device.

Legal bases

We process contact-form data because it is necessary to respond to your request and to take pre-contractual steps you have asked for (PDPL Art. 4 exceptions; GDPR Art. 6(1)(b) and (f)). We process analytics data only on the basis of your consent (PDPL Art. 4; GDPR Art. 6(1)(a)).

Who we share data with

We do not sell personal data, and we do not share it with anyone for marketing. Data is handled by a small set of service providers ("processors") strictly to operate this site:

— Hostinger (web and email hosting; servers may be located outside the UAE, including in the EU)
— Google (Google Analytics 4, only with your consent; Google LLC, USA)
— Cal.com, Inc. (optional call booking; USA)

International transfers

Because the providers above operate infrastructure outside the UAE (including the EU and the United States), submitting the form, accepting analytics, or booking a call involves transferring your data outside the UAE. We limit these transfers to providers that commit to recognized data-protection safeguards (such as contractual data-protection clauses and, for EU data, GDPR transfer mechanisms), consistent with the PDPL's cross-border transfer rules and GDPR Chapter V. Details are available on request.

Retention

Form submissions are kept in our mailbox for as long as needed to handle your inquiry and any resulting business relationship, then deleted. Google Analytics data is retained for 14 months. Cal.com bookings are retained per your booking relationship with us.

Security

The site is served over HTTPS; form submissions travel encrypted (TLS) to our mail server; access to the receiving mailbox is restricted. If a personal data breach occurs that risks your privacy or the confidentiality of your data, we will notify the UAE Data Office and affected individuals as required by the PDPL and its Executive Regulation.

Your rights

Under the PDPL (and GDPR where applicable) you have the right to: request access to the personal data we hold about you and information about how it is processed; request correction of inaccurate or incomplete data; request erasure; request restriction of processing; object to processing, including processing for direct marketing (which we don't do) and decisions based solely on automated processing (which we don't make); receive your data in a machine-readable format (portability); and withdraw consent at any time without affecting prior processing.

To exercise any of these rights, email hello@nthreads.com. We respond within 30 days and never charge for a first request.

Complaints

If you believe we have processed your data unlawfully, you may lodge a complaint with the UAE Data Office (the PDPL regulator). Visitors in the EU/EEA or UK may also complain to their local supervisory authority.

Children

This site is a business-services site and is not directed at children. We do not knowingly collect personal data from anyone under 18; if you believe a minor has submitted data, contact us and we will delete it.

Changes

If this policy changes, we'll update this page and the date above. Material changes will be noted prominently.

Contact

Data protection questions and rights requests: hello@nthreads.com.