Privacy Policy
YMS Studio ("we", "us", "our") operates this website and provides design and engineering services to clients worldwide. We take privacy seriously and collect only what we need to run the business.
This policy explains what we collect, why, how long we keep it, and your rights under Egyptian Personal Data Protection Law 151/2020 and the EU General Data Protection Regulation (GDPR) for visitors located in those jurisdictions.
1. What we collect
When you contact us
If you email us or fill out a contact form, we collect: your name, email address, phone number (if you provide it), and the content of your message. We use this only to respond to your inquiry and to discuss a potential engagement.
When you visit the site
Our hosting provider (Vercel) automatically logs: your IP address, browser type, pages viewed, and timestamp. This is standard server-log data used for security, performance monitoring, and abuse prevention.
Cookies and analytics
We use cookieless first-party analytics to count page visits and enquiry steps. The following tools are optional and run according to your choice. We do not sell your contact details.
- Google Analytics — measures page visits and interactions after you choose Site experience.
- Microsoft Clarity — session recordings and heatmaps to identify usability issues after you choose Site experience. Enquiry form fields are masked from recordings.
- Meta Pixel — on our business-websites enquiry page, measures page views, enquiry steps and confirmed submissions after you choose Ad measurement. Meta may receive browser/device information, page URL and advertising identifiers to attribute and optimise ads. We do not send form answers or contact details through this browser integration. A budget-fit event reflects a visitor's answer, not a verified sale.
Meta Pixel, Google Analytics and Clarity load only after you choose the relevant category on the consent screen. Ignoring optional tools does not prevent an enquiry. Change or withdraw your choice using Cookie settings in the footer of any public page. We remember your choice for up to six months before asking again. Cookieless first-party counts and essential security checks are separate from these optional tools.
Project forms collect your company, role, project needs, budget range, timeline and contact details so we can assess and respond to your enquiry. We retain campaign identifiers with the brief to understand which advertisements produce suitable projects. After submission, choosing Continue on WhatsApp opens WhatsApp with a project summary; you decide whether to send it.
2. Why we collect it
- To respond to inquiries — when you contact us about a project.
- To deliver services — once we're engaged on a project together.
- To run the website — security, performance, abuse prevention.
- To comply with the law — tax, accounting, and regulatory obligations.
3. How long we keep it
- Contact form messages: 24 months from your last interaction, then deleted.
- Engaged client records: 7 years from project completion, as required by Egyptian commercial and tax law.
- Server logs: 90 days, then automatically purged.
4. Who we share it with
We do not sell your data. Ever. We share data only with service providers strictly necessary to operate the business:
- Vercel — website hosting, cookieless analytics and encrypted enquiry storage. Our application logs record delivery status rather than the contents of your brief.
- Google (Analytics + Workspace) — anonymized analytics (consent-gated) and email delivery.
- Microsoft Clarity — anonymized session recordings (consent-gated).
- Cloudflare — DNS and CDN.
- Resend / FormSubmit — delivery of contact-form submissions to our inbox.
- Zoho Mail — business email hosting.
- Egyptian tax authorities — only as legally required.
If a project requires sharing data with a third party (e.g. a client we work with), we will tell you first and only share what is necessary.
5. Your rights
Under Egyptian PDP Law 151/2020 and GDPR, you have the right to access, correct, delete, restrict processing, or port your personal data. You also have the right to object to processing and to withdraw consent at any time.
To exercise any of these rights, email hello@ymsstudio.com with the subject line "Privacy Request". We will respond within 30 days as required by law.
If you believe we've mishandled your data, you have the right to lodge a complaint with the Egyptian Personal Data Protection Center or your local EU data protection authority.
6. Security
We use industry-standard security: encrypted transport (HTTPS/TLS 1.3), encrypted backups, access controls on all client work, and prompt patching. We never store payment card data — payments are processed directly by payment providers (Stripe, Paymob, or bank transfer).
7. International transfers
Our infrastructure is global (Vercel's edge network). Data may be processed outside Egypt or the EU. When this happens, we rely on standard contractual clauses and provider-level safeguards approved under GDPR and Egyptian PDP Law.
8. Children
Our services are not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe we have, contact us and we will delete it.
9. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via the site or, where appropriate, by email.
10. Contact
YMS Studio
Cairo, Egypt
hello@ymsstudio.com