Privacy Policy
1. Who we are
This policy explains how Nxtwave FZC, trading as SiteIn48 ("SiteIn48", "we", "us"), a free zone company licensed by Sharjah Publishing City Free Zone (licence no. 4414505.01), Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates, collects and uses personal information when you visit our website, book a call or buy our website service.
2. What we collect
- When you buy: your name, email address and order details. Payments are processed by Whop. We don't receive or store your full card details.
- When you book a call: your name, email address and your answers in the booking form (for example your business, website or Instagram, and optionally a phone or WhatsApp number). Booking is handled by Calendly.
- Call recordings: by default, we record and transcribe our free calls and kickoff calls using Calendly's notetaker, to capture your requirements accurately. You can ask us not to record at the start of a call.
- Project materials: the business information, logos, photos and text you send us to build your site.
- Messages: anything you send us by email, or on the messaging channel you choose to work with us on.
- When you message us on WhatsApp: your phone number, your WhatsApp name and the messages, photos and files you send us. WhatsApp is provided by Meta, which handles those messages under its own terms and privacy policy.
- Advertising data: pages viewed, buttons clicked, device and browser information, and cookies or similar identifiers. The Meta Pixel collects this if you click "Allow" or, if you visit from the United Arab Emirates, from the start of your visit until you click "No thanks". Whop's pixel collects it only if you click "Allow", and also creates a device fingerprint, an identifier built from characteristics of your browser and device.
- Site usage data, only if you click "Allow": how you use our home and welcome pages, such as clicks, taps, scrolling and mouse movement, recorded by Microsoft Clarity so we can see what works on the page and what doesn't. Anything you type into a form is hidden from these recordings.
- Anonymous visit statistics: the page you visit, the site or ad campaign that sent you, your approximate location, your device type, browser and operating system, the links you click, and how far you scroll and how long you stay. Plausible Analytics and our host Vercel count these without cookies and without storing anything on your device. Neither stores your IP address with these statistics, and they don't identify you. If you click "No thanks", we stop counting your visits.
- Technical data: when you visit, our hosting provider records standard server logs (such as IP address, browser and pages requested) to run and secure the site. It also uses your IP address to tell which country you're visiting from, so visitors in the UAE see our UAE prices and our UAE cookie setting. Our fonts load from Google Fonts and some scripts load from cdnjs (Cloudflare), so those services receive your IP address.
3. How we use it
- To deliver the service you bought: scoping, writing, building, launching, hosting and revising your website.
- To communicate with you about your order and calls.
- To process payments and refunds, and to keep business and tax records.
- To measure our advertising and to show our ads to people who visited our site: with your consent or, if you visit from the UAE, until you click "No thanks".
- With your consent, to see how visitors use our site, so we can improve it.
- To count visits and see which pages, links and ad campaigns work, using anonymous statistics.
- To keep the site secure, meet legal obligations and protect our rights.
4. Legal bases (EEA and UK visitors)
Where data protection laws like the GDPR apply, we rely on:
- performing our contract with you (delivering your website);
- our legitimate interests (running, securing and improving our business, including anonymous visit statistics, and recording calls to capture requirements accurately);
- legal obligations (business and tax records);
- your consent (advertising pixels, site usage recordings, cookies and fingerprinting).
5. Who we share it with
We use service providers to run the business. They process data on our behalf or under their own terms:
- Whop (checkout, payments and, with your consent, its pixel)
- Calendly (call booking, recording and transcription)
- Meta (advertising measurement, with your consent or, for visitors in the UAE, until they click "No thanks")
- Meta (WhatsApp, for the chats you start with us)
- Microsoft (Clarity site usage analytics, with your consent)
- Plausible Analytics (anonymous visit statistics, processed in the EU)
- Vercel (website hosting and anonymous visit statistics)
- Namecheap (business email)
- Google Fonts and cdnjs by Cloudflare (fonts and scripts for our website)
We don't sell your personal information for money. We may disclose information if the law requires it.
6. Cookies and your choice
When you first visit, we ask whether we can measure our ads and see how our site is used. The Meta Pixel, Whop's pixel and Microsoft Clarity load only if you click "Allow". If you click "No thanks", none of them load.
If you visit from the United Arab Emirates, the Meta Pixel loads straight away and we tell you so. Click "No thanks" at any time to switch it off and remove its cookies. Whop's pixel and Microsoft Clarity still load only if you click "Allow".
Separately, Plausible Analytics and Vercel Web Analytics count visits anonymously. They set no cookies and store nothing on your device. They run unless you click "No thanks", which stops them straight away and on later visits.
We save your choice, and the date you made it, in your browser's local storage so we don't ask again on every visit. You can change it any time with "Cookie settings" at the bottom of our home page. You can also manage ads through Meta's ad preferences.
After you pay, our welcome page shows a booking calendar provided by Calendly. Calendly sets its own cookies when the calendar loads, which it needs to show times and book your call, and it shows its own cookie notice where required. See Calendly's privacy policy for details.
7. How long we keep it
We keep order, payment and tax records for 5 years, project materials for 12 months after delivery, and call recordings and transcripts for 6 months. Microsoft Clarity keeps site usage recordings for 30 days; a sample of recordings, any we save, and its heatmaps are kept for up to 9 months. Your cookie choice stays in your browser until you change it or clear your browser data, and we ask again after about six months, or sooner if what we ask for changes. We may keep information longer where the law requires it.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain uses, including advertising. You can withdraw consent, switch off the Meta Pixel, or stop the anonymous visit statistics, at any time through "Cookie settings".
Some US state laws treat advertising pixels as "sharing" personal information for targeted advertising. You can opt out of this by choosing "No thanks" in Cookie settings.
To make a request, email us at the address below. You may also complain to your local data protection authority.
9. International transfers
Our service providers may process data in countries other than yours, including the United States. Where required, transfers rely on appropriate safeguards provided by those providers.
10. Security
We take reasonable steps to protect your information, and we never ask for your passwords. No method of storage or transfer is completely secure.
11. Children
Our service is for businesses and isn't directed at children. We don't knowingly collect children's personal information.
12. Changes to this policy
We may update this policy. The date at the top shows when it last changed.
13. Contact
Privacy questions and requests: hello@sitein48.com.