Privacy Policy

Your privacy is important to us. It is Haf Saba's policy to respect your privacy regarding any information we may collect from you across our website, hafsaba.com, and other sites we own and operate.

We only ask for personal information when we truly need it to provide a service to you (e.g., via the contact form). We collect it by fair and lawful means, with your knowledge and consent. We also let you know why we're collecting it and how it will be used.

We only retain collected information for as long as necessary to provide you with your requested service. What data we store, we'll protect within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use or modification.

We do not sell your personal information or share it publicly. We only share it with the trusted service providers that help us operate this website (for example, analytics and email delivery — see "Sharing Your Information" below), or where we are required to by law.

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.

You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of your desired services.

Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. If you have any questions about how we handle user data and personal information, feel free to contact us.

Information We Collect

We collect information in the following ways:

  • Information you provide to us: This includes personal information you provide when you contact us via our contact form, such as your name, email address, phone number, and the content of your message.
  • Log Data: When you visit our website, our servers may automatically log the standard data provided by your web browser. This data may include your device's Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details about your visit.
  • Cookies: We use cookies to collect information about you and your activity across our site. A cookie is a small piece of data that our website stores on your computer, and accesses each time you visit, so we can understand how you use our site. This helps us serve you content based on preferences you have specified. We will provide more information on cookies in a dedicated cookie notice.

How We Use Your Information

We may use the information we collect for various purposes, including to:

  • Provide, operate, and maintain our website and services;
  • Respond to your inquiries and communicate with you (e.g., regarding your contact form submissions);
  • Improve, personalize, and expand our website and services;
  • Understand and analyze how you use our website;
  • Develop new products, services, features, and functionality;
  • Comply with legal obligations and protect our legal rights.

Sharing Your Information

We do not sell your personal information. We may share your personal information in the following limited circumstances:

  • Service Providers: We may share your information with third-party service providers who perform services on our behalf. These currently include:
    • Google Analytics (Google LLC/Google Ireland Ltd) – website traffic and usage analytics. Google Analytics is only loaded if you accept analytics cookies, and we run it with advertising and ad-personalisation features disabled.
    • Vercel Analytics (Vercel Inc.) – privacy-friendly website usage analytics and performance monitoring.
    • Brevo (Sendinblue SAS) – delivery of emails generated from contact form submissions.
    These service providers are obligated to protect your information and are not permitted to use your personal information for their own purposes.
  • Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
  • Protection of Rights: We may disclose your information when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

International Data Transfers

Some of our service providers are based outside the European Economic Area (EEA) and the UK. In particular, Google (Google Analytics) and Vercel (analytics and hosting) may process your information in the United States, while Brevo processes email data within the EU (France). Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards recognised under applicable data protection law, such as the EU-U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

Data Security

We take reasonable precautions to protect your personal information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including secure servers and data encryption where feasible. However, no internet or email transmission is ever fully secure or error-free, so you should take special care in deciding what information you send to us.

Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

For contact form submissions, we typically retain the information for a reasonable period to address your inquiry and for record-keeping purposes, after which it will be securely deleted if no longer needed.

Your Data Protection Rights

Depending on your location (e.g., if you are in the European Economic Area (EEA) or the UK), you may have certain data protection rights under applicable laws, including:

  • The right to access – You have the right to request copies of your personal data.
  • The right to rectification – You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
  • The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
  • The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
  • The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you wish to exercise any of these rights, please contact us using the contact details provided below. We will respond to your request in accordance with applicable data protection laws.

Cookies and Tracking Technologies

As mentioned, we use cookies and may use similar tracking technologies to track the activity on our Service and hold certain information. You will be presented with a cookie consent banner upon visiting our website where you can manage your preferences. For more detailed information about the cookies we use and your choices regarding cookies, please see our Cookie Notice (to be provided via the banner).

Children's Privacy

Our Service does not address anyone under the age of 16 ("Children"). We do not knowingly collect personally identifiable information from children under 16. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Links to Other Websites

Our website may contain links to other websites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, you can contact us.

This policy is effective as of May 8, 2025.

Last Updated: July 14, 2026