Privacy policy

1. Who we are

Samana Stack ("we", "us", "our") is a digital growth studio operating at samanastack.com. We are the data controller for information collected through this site. For anything privacy-related, email muhammad@getsamanastack.com and a person will answer.

2. What we collect

• Enquiry details: Your name, email address, current website and whatever you write in the message field. You choose what to put there — we do not need more than that to reply.
• Messages: Anything you send us over WhatsApp or email, retained as part of the conversation history.
• Analytics and advertising data: Google Analytics 4 and the Meta Pixel record IP address, browser and device type, pages viewed and referring source, so we can see which pages work and measure our own advertising.
• Server logs: Our host records standard request logs, including IP address, for security and debugging.

We do not ask for payment card details through this website, and we do not collect special category data such as health, biometric or political information.

3. Why we use it, and on what legal basis

• To reply to you and deliver work: Legal basis: performance of a contract, or steps taken at your request before entering one.
• To measure advertising and improve the site: Legal basis: consent where required, otherwise our legitimate interest in understanding whether our marketing works. You can withdraw consent by blocking cookies (see section 6).
• To keep records and meet tax obligations: Legal basis: legal obligation.

We do not use your information to make automated decisions that produce legal or similarly significant effects.

4. Who else sees it

We never sell your personal data. We share it only with the providers we need to operate, each acting on our instructions:

• Formspree: Receives and forwards contact form submissions.
• Meta Platforms: Advertising measurement via the Meta Pixel.
• Google: Analytics 4 and Search Console.
• Vercel: Website hosting and request logs.
• WhatsApp (Meta): If you choose to message us there.

We may also disclose information where the law requires it, or to establish or defend a legal claim.

5. International transfers

We work with clients in the United States, United Kingdom and Saudi Arabia, and our team and several of our providers are outside the UK and EEA. Where personal data is transferred internationally, we rely on the safeguards those providers have in place, such as standard contractual clauses. If you want to know where a specific piece of your data sits, ask us and we will tell you.

6. Cookies

The site sets first-party and third-party cookies for analytics and advertising measurement, including Meta’s _fbp cookie and Google Analytics identifiers. None of them are required for the site to function — you can block or delete cookies in your browser settings and every page will still work normally.

7. How long we keep it

• Enquiries that do not become projects: Deleted within 24 months.
• Client records: Kept for the duration of the engagement plus six years, which is what tax and contract-limitation rules require.
• Analytics data: Retained on each platform’s default schedule — currently 14 months for Google Analytics.

8. Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to someone else. You can also object to processing based on legitimate interests.

Email muhammad@getsamanastack.com and we will action it within 30 days. We will not charge you and we will not make it difficult. If you are in the UK and think we have handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk.

9. Security

The site is served over HTTPS and access to enquiry data is limited to the people who need it. No system is perfectly secure, and we will tell you promptly if a breach affects your data.

10. Changes

We may update this policy. Material changes will be reflected in the date at the top of this page.