Privacy policy
What we collect when you order a personalised piece, every company that touches it on the way, exactly what this site keeps on your device — and how to have the lot deleted. No clauses written to be skipped.
Last reviewed · August 2026
The short version
The rest of this page is the detail behind those four lines.
01 / What we collect
Three you hand over, and one we deliberately never ask for.
01 / What you tell us
Given at checkout, or in the message you send us. We ask for what it takes to make the piece and get it to your door — nothing beyond that.
02 / What you upload
In the customiser your file is read and drawn inside your own browser — it is not sent anywhere while you design. Artwork reaches us when you place the order or message it to us.
03 / If you make an account
Sign-in runs on Supabase. We can see the email address on your account; your password is stored by them, hashed, and is not visible to us at any point.
04 / What we don't collect
Worth stating plainly, because most policies leave it out. If you are ever asked for any of this in our name, it is not us.
02 / Why we hold it
Each purpose with the details it actually uses beside it — a purpose without that list is how a policy ends up covering everything.
Making what you ordered
Artwork, names and spellings, colour and size
Sending you a proof to approve
Email or WhatsApp number
Getting the parcel to you
Name, address, emirate, phone
Taking payment
Order total and email, handled by Stripe
Answering you, and keeping a record of the order
The order email and your messages
Offers and studio news
Email — only if you signed up for it
What we don't do with it
We don't build a profile of you, score you, target ads at you, or let software decide anything about you on its own. A person reads your order and a person makes it.
04 / Cookies & browser storage
Rather than say we use cookies, here is every key this site writes, by its real name. They sit in your browser's local storage on your own device — they are not sent to us with each request, and none of them can follow you to another site.
ebad-cart
The items in your basket
Until you order or empty it
ebad-wishlist
Pieces you saved for later
Until you remove them
ebad-lang
English or Arabic
Until you switch language
ebad-theme
Light or dark appearance
Until you switch it
sb-… (Supabase)
Keeps you signed in
Until you sign out
ebad-cookie-consent
Your answer to the cookie notice
Until you reset it below
What is not there
No Google Analytics, no Meta pixel, no session recording, no advertising tag. That is why the cookie notice offers a real Decline rather than burying it — declining costs you nothing, because there is no tracking to switch off.
Change your mind
Reset the answer you gave the cookie notice and it will ask again the next time you load the site. Clearing site data in your browser removes everything in the table above at once.
05 / Keeping and protecting it
Two questions that belong together: nothing is protected by being kept longer than it is needed.
How long we keep it
Order records
Five years — UAE tax law requires a business to keep its records that long
Artwork and personalisation files
While your order is in production, and after it so a reprint is possible — removed on request
Your account
Until you ask us to close it
Newsletter address
Until you tell us to stop
Anything in your browser
On your device, under your control — clearing site data removes all of it
How we protect it
And the limit
We are a small studio, not a bank. No transmission over the internet can be guaranteed, and we would rather say so than claim otherwise. If your data is ever caught up in a breach, we will tell you what happened and what we did about it.
06 / Your rights
Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, you can ask us for any of the following. We won't ask why, and using any of them never costs you service.
How to ask
Message the studio on WhatsApp or send an email — whichever you already use. We answer within 30 days at the outside, and usually the same week. We will only ask enough to be sure it is really you.
If you are not satisfied with how we handled it, you can raise it with the UAE Data Office.
Children
Our products are sold to adults. We do not knowingly collect anything from a child under 18 — if that has happened, tell us and it is deleted.
Data leaving the UAE
Stripe, Resend, Supabase and Netlify run infrastructure outside the UAE, so some of your data is processed abroad under their own data-protection commitments.
Changes to this page
The date at the top changes whenever this page does. If we ever start doing something materially different with your data, that change is described here before it starts.
Still unsure?
Anything on this page that is not clear enough, or you want your details out of our records — say so and it is handled.
Every commission is drawn, cut and finished by hand — in the same studio in Ajman, every time.
Printing and publishing in the UAE since 2012.
Made in Ajman · Delivered across the UAE
© 2026 Ebad Arts · Ajman, UAE
Visa · Mastercard · Apple Pay · Google Pay
