Legal Effective: January 1, 2026 Read time: ~7 min

Privacy policy.

Plain language about what we collect, why, how long we keep it, and what you can ask us to do with it. We try to keep this short and we try to mean it.

Scope of this policy

This policy applies to aftabiq.agency and any subdomains, including the contact form, project intake flow, and newsletter signups (when we eventually ship one). It also covers the personal data we collect from clients and prospective clients during sales, onboarding, and active engagements.

It does not cover third-party sites we link to — for example, a client case study that points to an external platform. Those sites have their own policies, and we'd encourage you to read them.

What we collect

We collect the minimum we need to do the work and run the studio. In practice that breaks down into three buckets:

Information you give us

  • Contact form submissions — name, email, phone (optional), company, project type, budget range, timeline, and the message body.
  • Engagement data — once a project kicks off, anything needed to deliver: brand assets, source files, briefs, feedback threads, payment details (handled by our payment processor, never stored on our servers).
  • Correspondence — emails, Slack/WhatsApp threads, and meeting notes we keep for the duration of the engagement.

Information we collect automatically

  • Basic analytics — page views, referrer, device type, and country-level location. We use a privacy-respecting tool that does not require consent banners for the level of data we collect.
  • Server logs — IP address, user agent, and timestamps, kept for up to 30 days for security and debugging.

Information from third parties

Occasionally we'll receive referrals from collaborators or platforms (e.g. someone forwards a brief, a discovery call is booked through a scheduling tool). In those cases we treat the data the same way as information you give us directly.

How we use it

Short version: to reply to you, do the work, send you things that are actually relevant, and run the business legally. Specifically:

  • To respond to inquiries — replying to contact-form submissions, scheduling calls, and sending the proposals you asked for.
  • To deliver projects — sharing files, collaborating, and invoicing. We never sell or rent client data.
  • To improve the studio — aggregated, non-identifying analytics help us understand which pages are useful and which aren't.
  • To meet legal obligations — keeping tax records, complying with lawful requests, and enforcing our own terms.

We don't do list-broking, behavioral ad targeting, or "lead enrichment" lookups. Your data stays inside the studio and the vendors we list below.

Sharing & third parties

We share data only with the vendors that make our work possible. Here's who they are, what we share, and why:

  • Hosting & infrastructure — our site and form submissions are hosted on infrastructure providers (e.g. Netlify, Supabase) for delivery, storage, and spam protection.
  • Email & scheduling — for sending replies, proposals, and meeting invites.
  • Payments — invoices and card processing are handled by dedicated processors. We never see or store full card numbers.
  • File storage & collaboration — active projects may use cloud drives and project management tools with appropriate access controls.

We don't share your data with advertisers, data brokers, or anyone outside the categories above. We don't sell anything, period.

Cookies & analytics

We use a minimal number of cookies. Most are strictly necessary (keeping the site working, remembering your preferences). A small number are analytics cookies that help us understand traffic patterns in aggregate.

You can clear or block cookies in your browser at any time — the site will still work, though some niceties (like the form remembering what you typed) may be lost.

Your rights

You have the right to ask us to:

  • Access the personal data we hold about you.
  • Correct anything that's wrong or out of date.
  • Delete data we no longer have a reason to keep.
  • Object to processing that's not strictly necessary for the engagement.
  • Export your data in a portable format.

To exercise any of these, email aftabiqglobal@gmail.com. We respond within 30 days, usually faster.

Data retention

We don't keep data forever. Retention depends on what the data is and why we have it:

  • Contact form submissions from non-clients — up to 24 months, unless you ask us to delete sooner.
  • Active client project files — kept for the duration of the engagement plus 24 months, then archived or deleted.
  • Tax & invoice records — kept for 7 years to meet legal obligations.
  • Server logs — up to 30 days.

Security

We take reasonable steps to protect your data: encryption in transit, access controls, two-factor authentication on all studio accounts, and limited staff access on a need-to-know basis. No system is perfectly secure, but if we ever have a breach that affects your data, we'll tell you promptly and explain what happened.

International transfers

The studio operates in New Delhi, India, and our infrastructure providers may process data in other countries (typically the US or EU). When data leaves your home jurisdiction, we rely on standard contractual clauses and provider-side safeguards to keep it protected.

Children's privacy

Our site and services are not directed at children under 16, and we don't knowingly collect data from them. If you believe a child has submitted personal data to us, please contact us and we'll delete it.

Changes to this policy

We may update this policy from time to time. When we do, we'll change the effective date at the top and, for material changes, drop a note in our next regular communication. Continued use of the site after an update means you accept the revised policy.

How to contact us

Questions, requests, or complaints — we read every one. Reach the studio at:

If you're unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.