Privacy Policy

MYaxis FZ LLC is a company registered in Ras Al Khaimah. We create personalised animated short films for individuals and families worldwide. Contact: info@qalbmedia.com

When you place an order or fill in a story brief, we collect: • Your full name and email address (via Stripe checkout) • Your story brief — names, relationships, memories, and other details you provide in the Fillout form • Your payment information — processed directly by Stripe. We never see or store your card details. • Order metadata — the package you selected, story category, and an anonymous order reference ID We do not collect phone numbers, physical addresses, or sensitive personal categories unless you voluntarily include them in your story brief.

We process your personal data to fulfil the contract you enter into when placing an order (GDPR Article 6(1)(b)): • Your name and email are used to deliver your completed film and send your order confirmation • Your story brief is used solely to create the film you ordered • Order metadata is used to track and manage your order We do not use your data for marketing without your separate, explicit consent.

To deliver our service, your data is processed by the following trusted third parties. Each acts as a data processor under contract with us: • Stripe, Inc. — payment processing. Your name, email, and payment details are handled under Stripe's privacy policy (stripe.com/privacy). Stripe is PCI DSS Level 1 certified. • Fillout.com — story brief forms. The answers you provide in our brief form are stored by Fillout and accessed by our team to create your film. • Resend.com — transactional email. Your name and email are passed to Resend to deliver your order confirmation. Resend does not use your data for any other purpose. None of these parties are permitted to use your data for their own marketing purposes.

• Story briefs: retained for up to 90 days after delivery to handle revision requests, then deleted from our working systems. • Order records (email, amount, order reference): retained for 7 years to meet tax and legal obligations. • Payment data: retained by Stripe according to their own retention policy. After the retention period, personally identifiable data is permanently deleted.

During the order process, we store temporary order state in your browser's sessionStorage — specifically your chosen package, an anonymous order ID, and form reference. This data: • Lives only in your current browser session • Is automatically cleared when you close the tab • Is never sent to any advertising or analytics platform • Does not use cookies

We do not currently use analytics cookies, advertising trackers, or third-party pixels. Our order flow uses sessionStorage (see Section 6) rather than cookies. If we introduce analytics in the future, we will update this policy and obtain your consent before doing so.

If you are located in the European Economic Area or United Kingdom, you have the following rights under GDPR: • Right of access — request a copy of the personal data we hold about you • Right to rectification — ask us to correct inaccurate data • Right to erasure ("right to be forgotten") — request deletion of your personal data • Right to restriction — ask us to limit how we use your data • Right to data portability — receive your data in a structured, machine-readable format • Right to object — object to processing based on legitimate interest • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time To exercise any of these rights, email info@qalbmedia.com with the subject "Data Request". We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK, or your EU Member State supervisory authority).

Qalb Media is based in the UAE. Our service providers (Stripe, Fillout, Resend) may process data in the United States or other countries. Where transfers from the EEA occur, they are governed by Standard Contractual Clauses or other appropriate safeguards as required by GDPR Chapter V.

We take appropriate technical and organisational measures to protect your personal data, including: • HTTPS encryption for all data in transit • Server-side processing of sensitive operations (no secrets exposed to the browser) • Limiting access to customer data to only those who need it to fulfil your order No internet transmission is completely secure. If you have reason to believe your interaction with us was compromised, contact info@qalbmedia.com immediately.

Our service allows customers to create films featuring children as characters. We do not knowingly collect personal data directly from children under 13. All data is collected from the adult placing the order. If you believe we have inadvertently collected data relating to a child without appropriate consent, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be indicated by a revised "Last updated" date at the top of this page. Continued use of our service after changes constitutes acceptance of the updated policy.

For any questions, data requests, or complaints relating to this Privacy Policy, contact: MYaxis FZ LLC Ras Al Khaimah info@qalbmedia.com