Privacy
Policy

Who We Are

This Privacy Policy applies to Naqsh Editions, a brand operated by Prime Metal Craft LLC, a company registered in Dubai, United Arab Emirates. When we refer to "Naqsh Editions", "we", "us" or "our", we mean Prime Metal Craft LLC.

We are the controller of the personal data described in this policy. You can contact us at hello@naqsheditions.com.

Scope

This policy explains how we collect and use personal data when you visit our website, submit an enquiry, place an order, complete payment through Stripe, or communicate with us.

Personal Data We Collect

When you use the collection checkout, we collect the information needed to process and fulfil your order, including:

• Your name, email address and phone number
• Quantity, selected destination country and order details
• Shipping address and billing information entered through Stripe Checkout
• Gift status, recipient name and gift message where you provide them
• Stripe transaction identifiers, payment status and order metadata

When you submit the connect-page enquiry form, we collect your name, email address, phone number and enquiry context. We also use a hidden anti-spam field to detect automated submissions.

We may also receive basic technical data, including IP address, browser type, device information, server logs and security events, through our hosting, payment and email service providers.

Payment Data

Payments are processed by Stripe. Card numbers, CVV codes, wallet credentials and card expiry dates are entered directly into Stripe's secure checkout flow and are not stored by us.

We receive payment status, customer contact details, shipping details, order metadata and transaction references from Stripe so we can confirm, fulfil and support your order.

How We Use Personal Data

We use personal data to:

• Respond to enquiries and collector conversations
• Create and process checkout sessions
• Take payment, prevent fraud and confirm payment status
• Fulfil orders, arrange delivery and support gift requests
• Maintain edition, invoice, tax and accounting records
• Protect the website, prevent abuse and troubleshoot errors
• Comply with legal, tax, regulatory or dispute obligations

We do not sell your personal data. We do not use your personal data for automated decision-making or profiling.

Legal Basis

Depending on the context, we process personal data because it is necessary to perform or take steps before entering into a contract with you, because you have provided consent, because we have a legitimate interest in operating and securing our website and customer relationships, or because we must comply with legal, tax or regulatory obligations.

You may withdraw consent where processing is based on consent. Withdrawal does not affect processing that occurred before withdrawal or processing required for legal or contractual reasons.

Who We Share Data With

We share personal data only where necessary with service providers and parties involved in operating the website and fulfilling orders, including:

• Stripe for payment processing, checkout, fraud prevention and transaction records
• Vercel for website hosting, serverless functions and deployment infrastructure
• Namecheap Private Email SMTP or another email service provider for enquiry email delivery
• Couriers, logistics providers and delivery partners for order fulfilment
• Professional advisers, accountants, legal advisers, tax authorities or regulators where required

Website images and assets may be served through third-party infrastructure, including Cloudinary. This provider may process limited technical data required to serve its files.

International Transfers

Our service providers may process data outside the United Arab Emirates. Where this happens, we rely on the provider's contractual, technical and organisational safeguards and process only the data reasonably required for the relevant service.

Retention

We keep enquiry records only for as long as needed to respond, manage collector relationships and protect our legitimate interests. Order, payment, invoice, delivery and accounting records may be retained for longer where required for legal, tax, audit, warranty, dispute or regulatory purposes.

If you ask us to delete your personal data, we will delete or anonymise it where possible unless we need to keep it for legal, accounting, security or dispute reasons.

Security

We use reasonable technical and organisational measures to protect personal data, including HTTPS, secure third-party payment processing, limited data collection and restricted access to operational systems.

No online system is completely secure. You should avoid sending sensitive payment or identity information through the contact form or email.

Cookies and Similar Technologies

We do not currently use advertising cookies or third-party analytics. Stripe Checkout and other service providers may use necessary cookies or similar technologies for payment processing, fraud prevention, security and checkout functionality.

Our website loads external fonts and media assets. Your browser may connect to those providers to retrieve files required to display the website.

Your Rights

Subject to applicable law, you may have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, cessation of processing, withdrawal of consent, portability, or objection to certain processing.

To exercise your rights, contact us at hello@naqsheditions.com. We may need to verify your identity before acting on a request. We will respond within the timeframe required by applicable law.

Children

Our website and sculptures are not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us and we will take appropriate steps.

UAE Data Protection

As a Dubai-based business, we aim to handle personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and other applicable privacy requirements.

Changes to This Policy

We may update this Privacy Policy from time to time. The current version will be published on this page with an updated date. Continued use of the website after a policy update means you acknowledge the updated policy.

Contact Us

For questions about this Privacy Policy or how we handle personal data, contact us at hello@naqsheditions.com.