Privacy Policy
YMS Studio ("we", "us", "our") operates this website and provides design and engineering services to clients worldwide. We take privacy seriously and collect only what we need to run the business.
This policy explains what we collect, why, how long we keep it, and your rights under Egyptian Personal Data Protection Law 151/2020 and the EU General Data Protection Regulation (GDPR) for visitors located in those jurisdictions.
1. What we collect
When you contact us
If you email us or fill out a contact form, we collect: your name, email address, phone number (if you provide it), and the content of your message. We use this only to respond to your inquiry and to discuss a potential engagement.
When you visit the site
Our hosting provider (Cloudflare) automatically logs: your IP address, browser type, pages viewed, and timestamp. This is standard server-log data used for security, performance monitoring, and abuse prevention.
Cookies and analytics
We do not use third-party advertising trackers or sell behavioral data. With your explicit consent (via the cookie banner), we use two analytics tools to understand how the site is used:
- Google Analytics 4 — aggregate traffic measurement (pageviews, referral sources, country, device). IP addresses are anonymized before processing. Data is retained for 14 months.
- Microsoft Clarity — anonymized session recordings and heatmaps to identify usability issues. Clarity automatically masks all text input, form values, and sensitive page elements before recording.
Both tools load only after you click "Accept" on the cookie banner. If you decline or ignore the banner, no analytics scripts run and no analytics cookies are set. You can revoke consent at any time by clearing your browser's site data for ymsstudio.com, or by emailing us.
2. Why we collect it
- To respond to inquiries — when you contact us about a project.
- To deliver services — once we're engaged on a project together.
- To run the website — security, performance, abuse prevention.
- To comply with the law — tax, accounting, and regulatory obligations.
3. How long we keep it
- Contact form messages: 24 months from your last interaction, then deleted.
- Engaged client records: 7 years from project completion, as required by Egyptian commercial and tax law.
- Server logs: 90 days, then automatically purged.
4. Who we share it with
We do not sell your data. Ever. We share data only with service providers strictly necessary to operate the business:
- Cloudflare — hosting, DNS, and CDN infrastructure.
- Google (Analytics + Workspace) — anonymized analytics (consent-gated) and email delivery.
- Microsoft Clarity — anonymized session recordings (consent-gated).
- Zoho Mail — business email hosting.
- Egyptian tax authorities — only as legally required.
If a project requires sharing data with a third party (e.g. a client we work with), we will tell you first and only share what is necessary.
5. Your rights
Under Egyptian PDP Law 151/2020 and GDPR, you have the right to access, correct, delete, restrict processing, or port your personal data. You also have the right to object to processing and to withdraw consent at any time.
"> with the subject line "Privacy Request". We will respond within 30 days as required by law." data-ar="لممارسة أي من هذه الحقوق، أرسل بريداً إلكترونياً إلى "> بعنوان "طلب خصوصية". سنرد خلال ٣٠ يوماً كما يقتضي القانون.">To exercise any of these rights, email with the subject line "Privacy Request". We will respond within 30 days as required by law.
If you believe we've mishandled your data, you have the right to lodge a complaint with the Egyptian Personal Data Protection Center or your local EU data protection authority.
6. Security
We use industry-standard security: encrypted transport (HTTPS/TLS 1.3 via Cloudflare), encrypted backups, access controls on all client work, and prompt patching. We never store payment card data — payments are processed directly by payment providers (Stripe, Paymob, or bank transfer).
7. International transfers
Our infrastructure is global (Cloudflare's network). Data may be processed outside Egypt or the EU. When this happens, we rely on standard contractual clauses and provider-level safeguards approved under GDPR and Egyptian PDP Law.
8. Children
Our services are not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe we have, contact us and we will delete it.
9. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via the site or, where appropriate, by email.
10. Contact
">" data-ar="استوديو YMS
القاهرة، مصر
">">YMS Studio
Cairo, Egypt