Privacy Policy
Last updated: 19 August 2026
This Privacy Policy explains how Ninetystudio FZE ("NinetyStudio", "we", "us", "our") collects, uses, and protects your personal data when you visit this website, in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR). Where applicable, we also comply with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL).
Data Controller
Legal name: Ninetystudio FZE
Operated by: Nicola Malgeri
Trade licence no.: 4428195.01 (Sharjah Publishing City Free Zone Authority)
Registered address: Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
Email: n.malgeri@ninetystudio.io
What Data We Collect
Data You Provide Directly
When you contact us through the contact form, book a strategy call via Calendly, or email us directly, we may collect your name, email address, company information, and any other information you choose to provide in your message.
Data Collected Automatically
When you visit our website, we may collect certain information automatically through cookies and similar technologies. This includes your IP address, browser type, device information, pages visited, time spent on pages, and referring website. For full details, please see our Cookie Policy.
Why We Collect Your Data
We process your personal data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| To respond to your enquiries and communications | Your consent / Legitimate interest |
| To provide services you have requested | Contract performance |
| To schedule and conduct strategy calls | Your consent / Contract performance |
| To analyse website usage and improve user experience | Your consent (for analytics cookies) |
| To display relevant advertisements | Your consent (for marketing cookies) |
| To comply with legal obligations | Legal obligation |
Data Sharing
We do not sell your personal data. We may share your data with the following third parties:
- Google Analytics and Google Ads: If you consent to analytics and/or marketing cookies, data about your website usage may be shared with Google. Google may process this data in the United States. Google is certified under the EU-US Data Privacy Framework. See Google's Privacy Policy.
- Calendly: If you book a strategy call, your scheduling data is processed by Calendly. See Calendly's Privacy Policy.
- Vercel: This website is hosted on Vercel, who may have access to server logs and data stored on their infrastructure. See Vercel's Privacy Policy.
International Data Transfers
Your personal data is processed by Ninetystudio FZE in the United Arab Emirates. Some of the third parties mentioned above may also process your data outside the European Economic Area (EEA). For users in the EU/EEA, we ensure that any such transfers are protected by appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions by the European Commission, where required.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Contact form enquiries: Up to 2 years after our last communication, unless a business relationship is established.
- Client data: For the duration of our business relationship plus the period required by applicable law (typically 5 years).
- Analytics data: Retained according to Google Analytics' retention settings (typically 14 or 26 months).
- Cookie consent preferences: Stored in your browser until you clear them.
Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can request correction of inaccurate or incomplete data.
- Right to erasure: You can request deletion of your data in certain circumstances.
- Right to restriction: You can request that we limit how we use your data.
- Right to data portability: You can request a copy of your data in a machine-readable format.
- Right to object: You can object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at n.malgeri@ninetystudio.io. We will respond to your request within one month.
Right to Lodge a Complaint
If you believe your data protection rights have been violated and you are located in the EU/EEA, you have the right to lodge a complaint with the data protection supervisory authority of your country of residence.
Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
Contact
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at: n.malgeri@ninetystudio.io