Privacy notice.

Who is responsible

KAFFY LIMITED (company number 16808640) is the controller. Its registered office is Silverstream House, 45 Fitzroy Street, 4th Floor, London, England, W1T 6EB. Privacy questions can be sent to hi@shakirat.xyz.

What is collected and why

• Enquiries: your name, email address, selected conversation type, message, and correspondence, so Shakirat can respond and take steps you request before a possible contract.
• Service information: scope, product context, commercial records, and the minimum technical material needed to deliver an agreed review.
• Security and operations: limited server logs and request information needed to keep the website reliable and investigate misuse.
• Optional analytics: pseudonymous website-use data only after consent, to understand and improve the website.
• Optional advertising measurement: standard page and conversion events sent to Meta or Google only after marketing consent, to measure advertising effectiveness.

The working lawful bases are steps requested before a contract and contract performance for enquiries or services, legitimate interests for website security and business administration, legal obligation for required records, and consent for optional analytics or advertising measurement.

Providers and sharing

The website is hosted on Hetzner. Resend delivers contact-form email. PostHog provides optional analytics only when consent is given and a separate Shakirat property is configured. Meta and Google provide optional advertising measurement only after marketing consent. Shakirat does not send form contents, technical intake, repository details, credentials, or review findings to advertising providers. Relevant information may also be shared with professional advisers or authorities when reasonably necessary or legally required. Personal data is not sold.

Retention and international processing

Unsuccessful enquiry correspondence is normally kept for up to 12 months. Contract, accounting, legal, and service-delivery records may be kept longer where required. Short-lived technical logs are kept only as needed for security and operations. Some providers may process data outside the UK; Shakirat uses provider terms and lawful safeguards where required.

Your rights

Depending on the circumstances, you may ask to access, correct, erase, restrict, or receive your personal data, object to processing, or withdraw consent. Contacthi@shakirat.xyz. You can also complain to the UK Information Commissioner’s Office.

Cookies and changes

The cookie and analytics notice explains the website’s browser storage and your controls. This notice may be updated when the website, service, providers, or law changes; the effective date above will change too.