Privacy policy

Last updated: 26 August 2026

This page describes what the site actually does, but it has not been reviewed by a lawyer. It needs legal review before it is relied on.

What we collect

  • Your name and mobile number, both needed to answer your request.
  • Your email address, if you choose to give one — the field is optional, and we can reply by phone alone.
  • The speciality, city, preferred date and the detail of your request, as you wrote it.
  • The consent wording shown to you, its version number, and the time you agreed — a record of exactly what you agreed to.
  • A hash of your IP address and browser, not the values themselves. Used to limit automated submissions; the originals cannot be recovered from it.

Why we collect it

  • To contact you about your request and prepare a proposal.
  • To arrange and carry out the shoot.
  • We do not use your details for marketing, do not send promotional messages, and do not sell or share them with any third party.
  • The site carries no third-party analytics or tracking.

How we protect it

  • Your name, mobile number, email and brief are stored encrypted in the database, not as readable text.
  • Your details are never shown in full in the admin panel. They appear masked, and revealing them is a separate action recorded with the name of whoever did it and when.
  • The connection to the site is encrypted end to end over HTTPS.
  • Access is limited by role, to authorised WCAM staff only.

How long we keep it

  • Request data is kept for twenty-four months after the request is closed — delivered or cancelled — then permanently deleted, with no recovery afterwards.
  • The period runs from closure, not from submission.
  • You can ask us to delete it sooner.

Your rights

  • Access the data we hold about you.
  • Correct anything inaccurate.
  • Ask for your data to be deleted.
  • Withdraw your consent at any time — withdrawal does not affect the lawfulness of processing before it.

How to exercise them

  • Email [email protected] from the address you gave us, or message us on WhatsApp from the mobile number on the request.
  • We may ask for your reference number to verify your identity before acting.
  • We respond within thirty days at the latest.

Where your data is processed

  • The site's data is hosted inside the Kingdom of Saudi Arabia.
  • The only external party that may receive a signal when you submit the form is Cloudflare Turnstile, which checks that you are not an automated program. No personal data is sent to it.