Privacy Policy

Sitekrafters Privacy Policy

Last updated: Oct 15, 2026 · @Melroy Dickson 

  1. Who we are

This Privacy Policy explains how Sitekrafters collects, uses, shares and protects personal data when you visit sitekrafters.com, contact us, or engage us for services.

Sitekrafters is a brand of Wordkrafters Media Labs FZC (“Sitekrafters”, “we”, “us”, “our”), the data controller for the personal data described here:

Wordkrafters Media Labs FZC Business Centre, SPC Free Zone PO Box 73111, Sharjah, United Arab Emirates Email: [privacy contact email]

We build ecommerce and corporate websites, Shopify stores, Amazon and noon marketplace listings, author websites, and provide SEO and related consulting. We process personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and, where it applies to visitors or clients in the European Union or United Kingdom, the GDPR and UK GDPR.

  1. Information we collect

Category

Examples

How we get it

Contact and identity data

Name, company, job title, email, phone, WhatsApp number

Contact forms, emails, calls, meetings

Project and account data

Business details, brand assets, product catalogues, website and store credentials, marketplace seller account access

Provided by you during an engagement

Billing data

Billing name and address, trade licence and VAT/TRN details, payment records

Quotes, invoices, payment providers

Communications

Messages, feedback, meeting notes, support requests

Email, WhatsApp, video calls, forms

Technical and usage data

IP address, browser and device type, pages viewed, referring site, approximate location

Cookies and analytics tools on our website

Marketing preferences

Newsletter sign ups, opt outs

Forms and email links

We do not knowingly collect sensitive personal data (such as health, religious or biometric data). Please do not send it to us. We do not store full payment card details; card payments are handled by our payment providers.

  1. How we use your information

Purpose

Legal basis

Responding to enquiries and preparing proposals and quotes

Steps at your request before a contract; legitimate interests

Delivering services: building websites and stores, managing listings, running SEO

Performance of a contract

Invoicing, accounting and record keeping

Legal obligation (including UAE VAT and commercial law)

Improving our website, services and security

Legitimate interests

Sending updates, insights and offers

Your consent, which you can withdraw at any time

Complying with law, resolving disputes, enforcing our terms

Legal obligation; legitimate interests

We do not sell your personal data. We do not use it for automated decisions that have legal or similarly significant effects on you.

  1. Cookies and analytics

Our website uses cookies and similar technologies to work properly, remember your preferences and understand how visitors use the site.

  • Essential cookies keep the site secure and functional. They cannot be switched off.
  • Analytics cookies (such as Google Analytics) help us measure traffic and improve content.
  • Marketing cookies (such as Google Ads or Meta pixels, if used) help us measure campaigns and show relevant ads.

Where required, we ask for your consent before setting non-essential cookies. You can change your choice through our cookie banner or your browser settings. Blocking some cookies may affect how the site works.

  1. Sharing and international transfers

We share personal data only where needed to run our business or deliver your project, and only with parties bound to protect it:

  • Holding company: Wordkrafters Media Labs FZC and its brands, for administration and service delivery.
  • Service providers: hosting, website and ecommerce platforms (such as Shopify and WordPress hosts), email, cloud storage, analytics, CRM, payment and accounting providers.
  • Marketplaces and platforms: Amazon, noon, Google and Meta, when you ask us to manage listings, ads or accounts for you.
  • Freelancers and subcontractors who work on your project under confidentiality obligations.
  • Authorities and advisers: regulators, courts, auditors and lawyers, where the law requires or to protect our rights.

Some providers store or process data outside the UAE. When we transfer data abroad, we rely on countries with adequate protection or on contractual safeguards, as permitted under the PDPL and, where relevant, the GDPR.

  1. Data we handle for our clients

When we build or manage a website, store or marketplace account for you, we may access personal data of your customers (such as orders, names and addresses). For that data, you are the controller and we act as your processor.

We will process it only on your instructions and for your project, keep it confidential, protect it with appropriate security, and return or delete it when the engagement ends, unless the law requires us to keep it. You are responsible for having a lawful basis and a privacy notice for your own customers. A separate data processing agreement is available on request.

  1. Retention and security

We keep personal data only as long as needed for the purposes above:

Data

Retention

Enquiries that do not become projects

Up to 2 years after last contact

Client project and contract records

Duration of the engagement plus 5 years

Invoices and accounting records

At least 5 years, as required by UAE law

Website credentials and account access

Removed or handed back when the project ends

Marketing contacts

Until you unsubscribe

Analytics data

Up to 26 months

We use reasonable technical and organisational measures to protect your data, including access controls, encrypted connections, password managers for client credentials, and limited staff access. No method of transmission or storage is fully secure, but we will notify you and the relevant authority of a breach where the law requires.

  1. Your rights

Subject to applicable law, you can ask us to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your data, or restrict or object to its processing
  • Receive your data in a portable format
  • Withdraw consent at any time, without affecting earlier processing
  • Stop sending you marketing

To make a request, email us at [privacy contact email]. We will reply within 30 days and may need to verify your identity. If you are not satisfied, you can complain to the UAE Data Office or, in the EU or UK, to your local data protection authority.

  1. Children

Our website and services are meant for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.

  1. Third party links

Our website and the sites we build may link to other websites and platforms. We are not responsible for their privacy practices, so please read their policies.

  1. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. Significant changes will be highlighted on our website or sent to clients by email.

  1. Contact us

For any question about this policy or your data:

Sitekrafters, a brand of Wordkrafters Media Labs FZC Business Centre, SPC Free Zone PO Box 73111, Sharjah, United Arab Emirates Email: [privacy contact email] Website: sitekrafters.com