Privacy policy
This page describes what the site actually does, but it has not been reviewed by a lawyer. It needs legal review before it is relied on.
What we collect
- Your name and mobile number, both needed to answer your request.
- Your email address, if you choose to give one — the field is optional, and we can reply by phone alone.
- The speciality, city, preferred date and the detail of your request, as you wrote it.
- The consent wording shown to you, its version number, and the time you agreed — a record of exactly what you agreed to.
- A hash of your IP address and browser, not the values themselves. Used to limit automated submissions; the originals cannot be recovered from it.
Why we collect it
- To contact you about your request and prepare a proposal.
- To arrange and carry out the shoot.
- We do not use your details for marketing, do not send promotional messages, and do not sell or share them with any third party.
- The site carries no third-party analytics or tracking.
How we protect it
- Your name, mobile number, email and brief are stored encrypted in the database, not as readable text.
- Your details are never shown in full in the admin panel. They appear masked, and revealing them is a separate action recorded with the name of whoever did it and when.
- The connection to the site is encrypted end to end over HTTPS.
- Access is limited by role, to authorised WCAM staff only.
How long we keep it
- Request data is kept for twenty-four months after the request is closed — delivered or cancelled — then permanently deleted, with no recovery afterwards.
- The period runs from closure, not from submission.
- You can ask us to delete it sooner.
Your rights
- Access the data we hold about you.
- Correct anything inaccurate.
- Ask for your data to be deleted.
- Withdraw your consent at any time — withdrawal does not affect the lawfulness of processing before it.
How to exercise them
- Email [email protected] from the address you gave us, or message us on WhatsApp from the mobile number on the request.
- We may ask for your reference number to verify your identity before acting.
- We respond within thirty days at the latest.
Where your data is processed
- The site's data is hosted inside the Kingdom of Saudi Arabia.
- The only external party that may receive a signal when you submit the form is Cloudflare Turnstile, which checks that you are not an automated program. No personal data is sent to it.