Privacy Policy

Metazeum is a graphic and digital design studio based in Dubai, United Arab Emirates, operating internationally. In this policy, "we", "us" and "our" mean Metazeum, and "you" means any visitor, prospect, or client.

You can reach us about anything in this policy at metazeum@gmail.com.

Information you give us: your name, email address, phone number or messaging handle, preferred contact method, requested meeting times, budget range, the services you're interested in, and anything you type into our contact, estimate or agreement forms.

Information collected automatically: basic technical data such as device and browser type, approximate location derived from your IP address (used only to preselect your country dialling code, and only if you accept optional cookies), pages viewed, and interaction events used to understand how the site is used.

We do not intentionally collect sensitive personal data, and we ask you not to send it to us. Our services are not directed at children under 16.

To respond to your enquiry, prepare proposals and estimates, schedule discovery calls, deliver and support projects, issue invoices, keep records required by law, and improve our website and services.

Our lawful bases are: performance of a contract (delivering work you engaged us for), our legitimate interests (responding to enquiries, securing and improving the site), your consent (where you volunteered information or opted in), and compliance with legal obligations.

We do not sell your personal data, and we do not use it for automated decision-making that has a legal effect on you.

If you complete our online agreement form, we store the details you enter (name, contact information, project scope) together with your drawn signature image and the agreement text, so we have a record of what was agreed.

When you send a brief through our contact form or the estimate tool, we receive what you submit and notify our team through email and messaging tools such as Telegram so we can reply. Packages you select in the estimate tool may be saved in your own browser so you don't lose them.

Please do not share passwords, payment card details, or confidential third-party information through any form on this site.

Service providers who help us operate: our website and application hosting platform, email delivery, file storage for signature images, and messaging tools (including Telegram) used to notify our team of new enquiries.

Professional advisers, payment processors, and authorities where required by law or to establish or defend legal claims. Any provider we use is bound to process data only on our instructions.

Some providers are located outside the UAE or your country. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses.

Strictly necessary storage: we save your cookie choice and, if you use the estimate tool, your selected package in your browser's local storage so the site works as expected. These do not require consent.

Optional, only if you choose "Accept all": (1) a one-time IP-based country lookup through a third-party service (ipapi.co) to preselect your phone dialling code, and (2) basic, aggregate analytics about how the site is used. If you choose "Essential only", neither is used.

You can change your choice at any time with the "Cookie settings" link in the site footer, and you can also block or delete cookies and local storage in your browser settings.

Enquiries that don't become projects are kept for up to 24 months, then deleted. Client and project records, including contracts and invoices, are kept for as long as needed to deliver the work and for the retention period required by applicable tax and commercial law.

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our processing of your personal data, to withdraw consent, to receive a copy of your data in a portable format, and to lodge a complaint with your data protection authority.

To exercise any of these, email metazeum@gmail.com. We will respond within 30 days and may need to verify your identity first.

We use reputable hosted infrastructure, access controls, and encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we will notify you and any relevant regulator of a qualifying breach as required by law.

We may update this policy as our services evolve. The date at the top reflects the current version, and material changes will be highlighted on this page.