Privacy | الخصوصية

Privacy notice in English

Effective 2 September 2026. MIKY Creative Studio is a sole proprietorship based in Cairo, Egypt and controls the personal data described here. General enquiries: mikycratives@gmail.com. Privacy requests: info@mikycs.com.

The project enquiry form collects the selected service, project description, name, email address, optional phone or WhatsApp number, and a record of consent. The current form does not request a budget, company name, or file upload. Hosting and security providers may also process technical request, device, browser and IP information needed to deliver and protect the site. The application immediately hashes the rate-limit identifier and does not add an IP address or user agent to the lead record.

We use enquiry data to respond, understand the request, manage pre-contract follow-up and protect the form from abuse. Our bases are consent, steps requested before a contract, and legitimate interests in operating and securing the site where those interests do not override individual rights.

Our providers are HubSpot for lead management, Hostinger for email, Vercel for hosting and analytics, Upstash for abuse prevention, Sanity for website content, Mux for media delivery, and Google Search Console for search visibility. The enquiry flow is designed not to store lead data in Sanity or send it to analytics. We do not sell personal data.

HubSpot hosts this account’s enquiry-management data in the European Union (Germany), with disaster-recovery and backup replication within the regional hosting location; limited processing may occur outside it through specified subprocessors or usage services under HubSpot’s terms. Upstash temporarily stores hashed abuse-prevention values with Frankfurt, Germany as the primary region and Mumbai, India as a read region. The site’s Production functions are configured for Frankfurt, Germany in Vercel region fra1, while Vercel’s edge network is global.

Sanity uses Google Cloud infrastructure in Belgium as the primary location, with processing in the United States, for website content only and does not receive project enquiries. Hostinger provides email under its data processing addendum; we have not established one fixed mailbox country and therefore do not attribute an unconfirmed location. Provider DPAs and transfer terms apply, including Standard Contractual Clauses and the UK Addendum where applicable.

Enquiry data is retained for no more than 12 months after the last related contact, unless a longer period is legally required or needed to establish a legal claim. Deletion covers HubSpot records and mail copies under our control. Hostinger keeps deleted messages in Trash for up to 30 days and states that deleted-mailbox data is permanently expunged after 30 days. Protected provider copies may remain until their ordinary deletion or backup cycle completes.

People under 18 may browse the site. A parent or legal guardian must submit an enquiry for a child under 15. A person aged 15 to 18 may submit only with guardian consent and awareness. We do not direct advertising to children or profile or behaviourally track them.

You may request access, correction, deletion or restriction, withdraw consent, or object where applicable by emailing info@mikycs.com. We may verify identity before acting. You may also complain to the Egyptian Personal Data Protection Center.

If a newsletter is introduced, it will use a separate, unticked marketing consent and every message will provide a clear, free unsubscribe method. We will update this notice when processing changes and request fresh consent where required.