Dhikrayat (operated by Dhikrayat Studio FZ-LLC) provides photography and videography media coverage services across the GCC. We take privacy seriously and aim to be transparent about what we collect, why, and how long we keep it. This policy aligns with the Saudi Personal Data Protection Law (PDPL), UAE Federal Decree-Law No. 45/2021, and applicable European GDPR standards where relevant.
1. What we collect
When you contact us through the booking form, we collect: your name, email address, phone number (optional), company name (optional), city, type of shoot, shoot date, and the contents of your message. We do not collect payment information through our website — invoicing is handled separately after a quote is accepted.
During delivery of services, we may receive personal data of attendees, talent, or executives appearing in our coverage. This is governed by the talent release agreement signed at the time of the shoot.
2. How we use it
- To respond to your inquiry and prepare a quote.
- To coordinate logistics for a booked shoot (permits, call sheets, travel).
- To deliver your project files via secure cloud transfer.
- To send you invoices, contracts, and follow-up correspondence.
- To improve our services through aggregated, anonymized analytics.
We never sell your personal data. We never share it with marketing partners. We never use it to retarget you with advertising.
3. Who has access
Access is limited to: the producer assigned to your project, the creative lead, the photographer/videographer crew named on your call sheet, our editing team, and our finance team for invoicing purposes. All personnel are bound by signed confidentiality agreements.
4. Where data lives
Inquiry data is stored on servers located in Saudi Arabia or the UAE. Project deliverables are stored on encrypted cloud storage with regional residency. We retain inquiry data for 2 years from the date of last contact, and project deliverables for 7 years (the standard archive retention for media work).
5. Cookies and tracking
We use minimal first-party cookies for session continuity (e.g., your language preference). We use privacy-respecting analytics (Plausible or self-hosted Matomo) that do not set tracking cookies, do not fingerprint visitors, and do not share data with third parties. We do not use Google Analytics, Meta Pixel, or any advertising-network tracking.
6. Your rights
Under PDPL, GDPR, and equivalent frameworks, you have the right to: access the personal data we hold about you, correct inaccurate data, request deletion (subject to legal retention obligations), object to processing, and withdraw consent. To exercise any of these rights, email privacy@dhikrayat.com. We will respond within 30 days.
7. Subjects appearing in our coverage
If you are an attendee, talent, or guest who appears in coverage we produced for a client, and you wish to be removed from delivered material, please contact us at privacy@dhikrayat.com with details of the event. We will coordinate with the client (the legal data controller for that shoot) to resolve your request.
8. Children's privacy
We do not knowingly process personal data of children under 16 without parental consent. Shoots involving minors require written guardian authorization on our talent release form, signed in person before any image is captured.
9. Updates to this policy
We may revise this policy. Material changes will be flagged on the homepage for 30 days before taking effect. The last update date appears at the top of this page.
10. Contact
For any privacy question, complaint, or rights request:
- Email: privacy@dhikrayat.com
- General: hello@dhikrayat.com
- Postal: Dhikrayat Studio, Riyadh, Kingdom of Saudi Arabia