Privacy Policy

Who we are

Daniel Shammah Web Studio is the trading name used by Daniel Shammah, an individual based in Malaysia, for web design and development services. In this policy, "we" and "us" mean Daniel Shammah Web Studio. We are not a US company and have no office in the United States.

What we collect

When you send an enquiry we collect the details you enter: your name, email address, business name, project type and description, and any optional details you choose to give (website, industry, country, budget range, launch date, phone number and preferred contact method).

To protect the form from abuse we also store a one-way hash of your IP address, not the address itself. Our web server keeps standard access logs (IP address, time, page requested, browser type) for security and troubleshooting.

This website does not use advertising or analytics cookies. If you sign in to our administration area (studio staff only), a strictly necessary session cookie is used.

How we use it

• To reply to your enquiry and discuss your project.
• To prepare proposals, quotations, invoices and contracts if we work together.
• To keep records required for accounting and tax purposes.
• To protect this website against spam and abuse.

We do not sell your personal information and we do not use it for unrelated marketing.

Payments

Payments are processed by Stripe on Stripe-hosted pages. Card details go directly to Stripe and are never seen or stored by us. Stripe processes payment information under its own privacy policy. We keep payment references and statuses (for example, "paid") linked to your project.

Service providers

We use a small number of providers to run the studio: cloud hosting for this website and its database, Stripe for payments, and, where configured, an email delivery provider for enquiry notifications. These providers may process data outside your country, including in the United States, Australia and Malaysia.

How long we keep it

Enquiries that do not become projects are kept for up to 24 months and then deleted. Records for projects we carry out are kept for as long as accounting and tax law requires.

Your choices and rights

You can ask us to access, correct or delete the personal information we hold about you, or to stop contacting you. Depending on where you live, you may have additional rights under local law, such as the Malaysian Personal Data Protection Act 2010 or US state privacy laws. To make a request, use the contact form and say what you need; we may ask you to confirm your identity.

Security

Enquiries are sent over HTTPS and stored in a private database that is not reachable from the internet. Access to the administration area is restricted to the studio owner.

Changes

We will update this page if our practices change, and change the date at the top.