Zaniah Labs FZE (“we”) operates zaniahlabs.com. This policy explains what personal data the site collects, why, and what you can do about it. We are the data controller for that data.
Each of our products has its own privacy policy. This one covers the studio website only.
1. What we collect
You give us:
| Data | Why |
|---|---|
| Your name, email address, and message, when you email us | To answer you |
We collect automatically:
| Data | Why |
|---|---|
| IP address, browser type, requested page, timestamp (server logs) | Security, abuse prevention, diagnosing faults |
The site has no accounts, no forms, no analytics, and no advertising. It sets no cookies. Fonts are served from our own server, so visiting the site does not send your IP address to a font provider.
We do not collect special category data (health, biometrics, religious or political views, sexual orientation) and ask that you do not send it.
2. Why we may lawfully use it
For users in the EU/EEA and UK, our legal bases are:
- Legitimate interests — answering messages you send us, keeping the site secure. We have assessed that these do not override your rights.
- Legal obligation — responding to lawful requests.
3. Who we share it with
We do not sell personal data. We share it with:
- Service providers — hosting (Hetzner Online GmbH), content delivery, and email, under contract and only as needed.
- Professional advisers — lawyers, accountants, auditors, under confidentiality.
- Authorities — where legally required, and only to the extent required.
4. Where it goes
Data is stored in Germany (Hetzner) and the United States (Cloudflare edge).
Where we transfer personal data outside the EEA or UK, we rely on the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with any supplementary measures the transfer requires.
5. How long we keep it
| Data | Retention |
|---|---|
| Emails you send us | 2 years from last contact |
| Server logs | 90 days |
6. Your rights
Depending on where you live, you may have the right to:
- access a copy of your data;
- correct inaccurate data;
- delete your data;
- restrict or object to processing;
- portability — receive your data in a machine-readable format;
- complain to a supervisory authority.
Email privacy@zaniahlabs.com. We respond within 30 days. We may ask you to verify your identity first.
EU/UK users: you may complain to your local data protection authority.
UAE users: the UAE Data Office under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
California users: you have rights under the CCPA/CPRA, including the right to know, delete, and correct. We do not sell or share personal information.
7. Security
We use encryption in transit (TLS), access controls on a need-to-know basis, and regular dependency patching. No system is perfectly secure. If a breach affects your personal data and poses a risk, we will notify you and the relevant regulator without undue delay and, where required, within 72 hours.
8. Children
The site is not directed at children. If you believe a child has sent us personal data, email privacy@zaniahlabs.com and we will delete it.
9. Changes
We’ll post updates here and change the “Last updated” date.