Full English text (secondary reference)

This Privacy Policy explains what personal data we collect when you subscribe to Ayaat Studio, why we collect it, how long we keep it, and what rights you have over it. We comply with the UK General Data Protection Regulation (UK-GDPR) and the Data Protection Act 2018.

1. What we collect

When you subscribe, we collect (the "Subscription Data"):

• Your name (as it appears on your payment method) — for billing reconciliation.
• Your email address — for transactional emails (welcome, weekly digest, billing, cancellation).
• The Honoree name — the name that appears on the dedicated channels. This may be your own name, the name of a living person you wish to dedicate to, or the name of someone who has passed.
• An optional dedication text — a freeform sentence you write about the Honoree. We polish this into a one-line du'a published in the caption of each video.
• Your preferred language — English or Arabic, derived from your browser locale at checkout.
• Billing data — currency, amount, transaction ID. This is held by Stripe; we receive only the metadata needed for reconciliation.
• Operational logs — the video URLs published in your Honoree's name, view counts per video as reported by the platforms, and any comments captured for the Friday digest.

We do not collect: your full payment-card details (handled by Stripe), your physical address (unless you provide it in an email to us), special-category data such as health/religion-beyond-the-fact-of-being-a-Quran-subscriber, or any data about your Honoree beyond their name and your dedication text.

2. Why we collect it (legal bases under UK-GDPR Article 6)

We do not send marketing emails. The Friday digest about your own subscription is a service email, not marketing.

3. Who else sees it (data processors + third parties)

We use the following data processors to deliver the Service:

The published videos are public on YouTube, Instagram, and TikTok — that is the point of the service. The Honoree name is therefore public from the moment of publication. The subscriber name (yours) is private and never appears in published content.

We do not sell your data, share it with advertisers, or use it for any purpose beyond providing the Service.

4. International transfers

Some of our processors (Stripe, Vercel, Resend, Google, Meta, TikTok) transfer data outside the UK. We rely on Standard Contractual Clauses (SCCs) and adequacy decisions where available. By using the Service you consent to these transfers.

5. How long we keep it

• Active subscription: for the duration of your subscription.
• Cancelled subscription: Subscription Data retained for 3 years after cancellation, primarily for tax/audit records (HMRC requirement: 6 years for financial records; non-financial data we minimise to 3). After this period, we delete or anonymise.
• Operational logs (video URLs + view counts): retained indefinitely as part of the public record of published content. The link between you (subscriber) and these logs is severed at the 3-year retention boundary.
• Email correspondence: retained as long as the email account exists; we do not separately purge.
• Friday digest viewer du'as: retained 90 days then anonymised.

6. Your rights (UK-GDPR)

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure ("right to be forgotten") — ask us to delete your data, subject to retention obligations above.
• Restriction — ask us to limit how we process your data while a dispute is resolved.
• Portability — receive your data in a structured, machine-readable format.
• Object — to processing based on legitimate interest (see §2).
• Withdraw consent — where we rely on consent (currently we do not).

To exercise any right, email hello@ayaat.studio with your subscription email and a clear description of what you're asking for. We will respond within 30 days. There is no charge.

If you are not satisfied with our response, you may complain to the UK Information Commissioner's Office (ico.org.uk).

7. The Honoree's data

If you dedicate to a living person, you should have a reasonable belief that they would consent to the dedication. We cannot verify Honoree consent. If a named Honoree contacts us to request removal of their name from our channels, we will action that request within 14 days regardless of the subscriber's wishes; the subscription may be paused or substituted with a different Honoree at our discretion.

If you dedicate to a deceased person, no separate consent is required; the right to be forgotten does not apply to deceased individuals under UK-GDPR.

8. Cookies + tracking on ayaat.studio

The marketing site at ayaat.studio uses no analytics, no tracking cookies, and no third-party scripts beyond what is strictly necessary to display the page. Stripe Checkout (where you enter payment details) uses its own cookies — see Stripe's policy. The customer dashboard (when available) will use a session cookie for authentication only.

9. Children

The Service is not designed for or marketed to children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has subscribed, email hello@ayaat.studio and we will delete their account.

10. Data breaches

In the event of a data breach affecting subscribers, we will notify you within 72 hours of becoming aware, in accordance with UK-GDPR Article 34. We will describe what was accessed, what mitigation we are taking, and what (if anything) you should do.

11. Changes to this policy

We may update this Privacy Policy. Material changes will be emailed at least 14 days in advance; non-material changes take effect immediately. The current effective date is shown at the top of this page.

12. Contact + complaints

• Privacy questions: hello@ayaat.studio
• Subject Access Requests, erasure requests: hello@ayaat.studio

Ayaat Studio is operated by Musaed Alqanaie (sole trader, United Kingdom). Trading address available on request.