Privacy policy.

Streetlevel LLC is an independent brand and identity consultancy, licensed by the Sharjah Media City Free Zone Authority, Trade Licence No. 2646967, Sharjah, United Arab Emirates. For the purposes of data protection law, Streetlevel LLC is the data controller.

You can reach us about anything in this policy at omar@streetlevel.ae.

We collect only what we need, and nothing we don't:

• Mailing list: your full name, email address, and mobile number, which you provide through our sign-up form.
• Correspondence: whatever you choose to send us by email or WhatsApp, including your contact details and the content of your messages.
• Client work: the business and contact information reasonably necessary to deliver a project — names, roles, addresses, and billing details.
• Technical data: our hosting provider keeps standard server logs (IP address, browser type, pages requested) for security and performance, as virtually every website does.

We do not collect special-category data, we do not buy or rent lists, and we do not track you around the internet.

Our sign-up form does not transmit or store anything on our servers. Submitting it opens a pre-written message in your own email application, addressed to us, containing the details you entered. Nothing leaves your device until you press send. Your subscription request therefore travels as an ordinary email, from you, of your own volition — which is also your record of the consent you gave.

• Mailing list — to send you occasional email about new work, published rates, and studio notes. Lawful basis: your consent, given actively via the form. You may withdraw it at any time.
• Enquiries and correspondence — to reply to you and carry on a conversation you started. Lawful basis: legitimate interests.
• Client work — to scope, deliver, and invoice projects. Lawful basis: performance of a contract.
• Records — to keep the accounting and legal records we are required to keep. Lawful basis: legal obligation.

We will not use your data for any purpose incompatible with the above without telling you first and, where the law requires it, asking again.

You will only receive marketing from us if you asked for it. Every mailing includes a way out, and you can unsubscribe at any time — by replying to any email, or by writing to omar@streetlevel.ae. We action unsubscribes promptly and without conditions. Withdrawing consent does not affect the lawfulness of anything done before you withdrew it.

We do not sell, rent, or trade personal data. Full stop. We share it only with service providers who process it on our instructions and under contract:

• Email and hosting providers, who carry and store our correspondence and this website.
• Brevo (Sendinblue SAS, Paris), if and when we use it as our email marketing platform. In that case the data you provide for the mailing list is transferred to Brevo and processed under its privacy policy and data processing agreement, for the sole purpose of sending you our mailings.
• Professional advisers — accountants, insurers, lawyers — where necessary and under duties of confidence.

Beyond that, we disclose personal data only where the law compels us to, or to establish, exercise, or defend legal claims.

We are established in the United Arab Emirates and serve clients and subscribers internationally, so your data may be processed in the UAE and by our providers elsewhere. Where personal data protected by UK or EU law is involved, we rely on appropriate safeguards — including standard contractual clauses with our processors and, in Brevo's case, its EU establishment and processing commitments. Data you send us is also protected under the UAE Federal Personal Data Protection Law.

• Mailing list data: for as long as you remain subscribed, then deleted from the active list without undue delay.
• Correspondence: for as long as reasonably necessary to deal with the matter and maintain a coherent record of our dealings.
• Client and financial records: for the periods required by UAE law (typically five years from the end of the relevant financial year).

When data is no longer needed, we delete it or irreversibly anonymise it.

We apply technical and organisational measures appropriate to the size and nature of a small consultancy — access limited to those who need it, reputable providers, current software, and common sense. No transmission or storage of data is ever completely secure, and while we take reasonable care, we cannot and do not guarantee absolute security. If a breach occurs that puts your rights at risk, we will notify you and the relevant authority as the law requires.

Where UK or EU data protection law applies, you have the right to: access the personal data we hold about you; have it rectified or erased; restrict or object to its processing; portability of data you provided to us; and to withdraw consent at any time where consent is our basis. To exercise any of these, write to omar@streetlevel.ae. We may ask you to verify your identity, and we respond within the timescales the law sets.

If you are unhappy with how we have handled your data, we would ask you to raise it with us first — but where UK or EU law applies to you, you also have the right to complain to your local supervisory authority (in the UK, the Information Commissioner's Office at ico.org.uk), and in the UAE, to the UAE Data Office under the Federal Personal Data Protection Law.

We set no advertising or analytics cookies of our own. Our website platform may set strictly necessary cookies required for the site to function. If that ever changes, this policy and the site will say so before it does.

Our services and mailing list are directed at businesses and adults. We do not knowingly collect personal data from anyone under 18, and if we learn we hold any, we will delete it.

Our sites link to third-party content, including client work hosted elsewhere and platforms such as WhatsApp. Those services operate under their own privacy policies, for which we accept no responsibility.

We may revise this policy from time to time as our practices or the law change. The current version is always the one published at this address, with the date below. Material changes affecting how we use mailing-list data will be notified to subscribers, and where the law requires fresh consent, we will ask for it rather than assume it.

Nothing in this policy limits any right you have under applicable data protection law, and nothing in it creates contractual rights beyond those the law provides. To the fullest extent permitted by law, we exclude liability for loss arising from circumstances beyond our reasonable control, including the acts and omissions of third-party services identified above. This policy is governed by the federal laws of the United Arab Emirates as applied in the Emirate of Sharjah, without prejudice to mandatory protections you enjoy where you live.