Privacy Policy
In short
We collect what you send us in the application form, what we need to book and take payment for a session, and very little else. We do not sell your information. We advertise, and the advertising platforms we use set cookies on your device, which you can refuse using the controls in section 5. We publish case studies only when you have ticked the box asking for it, and you can withdraw that at any time. Every application is read by one person, Muhammad Algaiar.
This summary is here to be useful. The sections below are what actually governs.
1. Who we are
OTHENTIC LLC, a limited liability company registered in the State of Wyoming, United States, trading as QIRAT303. In this policy, “we”, “us” and “our” mean OTHENTIC LLC.
Postal address:
OTHENTIC LLC
1309 Coffeen Avenue STE 1200
Sheridan, Wyoming 82801
United States
Email: contact@qirat303.com
We are the data controller for the information described here. For any question about this policy, or to exercise any right in section 11, email contact@qirat303.com.
2. What this policy covers
The website at qirat303.com, including the application form at qirat303.com/apply and the contact form, our advertising, and the delivery of The Cut Mark session.
3. What we collect
3.1 When you apply
The application form asks for:
- Your full name
- Your email address
- Your business name
- A link where we can see your business
- Other links, optional
- Whether you have paying customers
- Your answers to six questions about your business, your competitors and your customers
- Anything else you choose to tell us, optional
- Whether you opted in to the founding rate
Some of these answers are commercially sensitive. One asks you to name a competitor you have lost a customer to. We treat everything in your application as confidential and we do not disclose it to anyone outside the services listed in section 7.
3.2 Technical information recorded with your application
Our form software records the IP address and browser from which an application was submitted. We use this only to detect spam and abuse. If you would prefer us not to hold this, email us and we will remove it from your entry.
3.3 When you contact us
If you use the contact form or email us, we receive your name, your email address and whatever you write, along with our reply.
3.4 When you book a session
Bookings are handled by Calendly. It collects your name, email address, time zone and chosen time, plus anything you add to the booking form.
3.5 When you pay
Payments are handled by Stripe. We never see or store your full card number. Stripe passes us a confirmation, the last four digits of the card, the cardholder name, the billing country and the amount.
3.6 During the session
Sessions run on Google Meet. We do not record sessions. If we ever wanted to record one, we would ask you first and you would be free to say no. We take written notes, which form the basis of your brief.
3.7 Automatically, when you visit the site
- Server logs. Our hosting provider records IP addresses, browser type, pages requested and timestamps, as any web server does. These are kept for a short period for security and troubleshooting.
- Fonts. Our pages use two typefaces delivered by Google Fonts. When a page loads, your IP address is visible to Google.
3.8 Advertising and measurement
We advertise this service, mainly to audiences in Egypt and the Gulf, on platforms including Meta (Facebook and Instagram) and Google.
To measure whether that advertising works, we use measurement tools supplied by those platforms, commonly called pixels or tags. These collect:
- Your IP address and approximate location
- Your browser, device and operating system
- Which of our pages you visited, how you arrived, and whether you started or completed an application
- An identifier stored in your browser, which the platform can match to an account you hold with them
The advertising platforms use this both for us and for their own purposes, including building profiles and showing you advertising on their own services and elsewhere. For that activity they act as independent controllers, not as our service providers, and their own privacy policies govern what they do with it. Links and opt-out controls are in sections 5 and 7.
We do not use these tools to make any automated decision about you, and we do not use them to profile you for any purpose other than advertising measurement.
4. Why we use it, and our legal basis
Where the EU or UK General Data Protection Regulation applies to you, these are our legal bases.
| What we do | Why | Legal basis |
|---|---|---|
| Read and assess your application | To decide whether the session is a fit and to reply to you | Steps taken at your request before entering a contract |
| Reply to you within 24 hours | Because we said we would | Steps taken at your request before entering a contract |
| Book, deliver and invoice the session | To perform the contract | Performance of a contract |
| Keep financial records | Tax and accounting obligations | Legal obligation |
| Detect spam and abuse, keep the site secure | To keep the service working | Our legitimate interests |
| Email you about your own application or booking | To deliver what you asked for | Performance of a contract |
| Publish a case study or testimonial | Only if you opted in | Your consent |
| Advertising and measurement cookies | To understand whether our advertising works | Your consent, where the law requires it, otherwise our legitimate interests |
If you do not provide the information the application form asks for, we cannot assess your application. That is the only consequence.
5. Cookies, and how to refuse advertising
5.1 Strictly necessary
A small number of cookies are needed for the site to function. WordPress sets cookies only for people logged in to administer the site, which is us. Calendly and Stripe set their own cookies on their own pages when you book or pay. These cannot be switched off without breaking the service.
5.2 Advertising and measurement
The tools described in section 3.8 store and read information on your device when you arrive on the site. These are not strictly necessary, and you can refuse them.
5.3 How to refuse or remove them
Any of these works, and none of them affects how the site functions for you:
- Your browser. Every major browser lets you block or delete cookies, and block third-party cookies entirely. Safari and Firefox block most advertising cookies by default.
- Meta. Manage or switch off ad personalisation at facebook.com/adpreferences
- Google. Manage or switch off ad personalisation at myadcenter.google.com
- Industry opt-outs. youronlinechoices.eu for Europe, optout.aboutads.info and optout.networkadvertising.org for the United States
- Email us. Write to contact@qirat303.com and we will exclude you from our advertising audiences and delete what we hold about your visit
5.4 If you are in the EU or the UK
Email contact@qirat303.com and we will delete anything we hold about your visit and exclude you from our advertising audiences. We will act on that within 30 days and we will not ask you why.
We keep our advertising under review and will introduce a consent notice for EU and UK visitors if our traffic from those regions makes one appropriate.
6. Marketing emails
We email you about your own application, your booking and your brief. That is part of delivering the service.
We do not add you to a marketing list without asking. If we ever start sending anything beyond that, it will be because you asked for it, every message will carry an unsubscribe link, and unsubscribing will take one click and have no effect on anything else.
7. Who else sees your information
We do not sell your information for money, and we do not share it for anyone else’s marketing. We use the following services to run the business, and your information passes through them only so far as each one needs it:
| Service | What it handles | Their policy |
|---|---|---|
| Hostinger | Web hosting, and the database your application is stored in | hostinger.com/legal/privacy-policy |
| Google Workspace | Correspondence to and from contact@qirat303.com | policies.google.com/privacy |
| Stripe | Card payments | stripe.com/privacy |
| Calendly | Session scheduling | calendly.com/privacy |
| Google (Meet and Fonts) | Session delivery and typefaces | policies.google.com/privacy |
The following advertising platforms receive information about your visit as described in section 3.8. They act as independent controllers, which means they decide what they do with it:
| Platform | Their policy | Your controls |
|---|---|---|
| Meta Platforms | facebook.com/privacy/policy | facebook.com/adpreferences |
| policies.google.com/privacy | myadcenter.google.com |
We may also disclose information where the law requires it, or to establish or defend a legal claim. If the business is ever sold or merged, your information may transfer with it, and we will tell you before that happens.
8. Where your information goes
We are based in the United States, and the services listed in section 7 are mostly based in the United States. If you are in the European Economic Area or the United Kingdom, your information will be transferred outside your country.
Where that happens, the transfer is covered by the Standard Contractual Clauses or an equivalent safeguard adopted by the service in question. You can ask us for details.
9. How long we keep it
| What | How long |
|---|---|
| Applications we decline | 12 months from the date you applied, then deleted |
| Applications from clients | For the life of the working relationship, then 7 years, because the brief and the application are the record of what was bought |
| Financial records | 7 years, as US tax rules require |
| Email correspondence | 3 years |
| Server logs | As set by our host, typically under 90 days |
| Advertising cookies | As set by each platform, typically up to 13 months |
| Case study material | For as long as the case study is published, and no longer once you withdraw consent |
You can ask us to delete your application sooner. See section 11.
10. Testimonials and case studies
This is the part worth reading closely, because it is unusual and because it is optional.
The application form includes a tick box offering the founding rate. Ticking it is your consent to be documented. Leaving it unticked costs you nothing except the discount, and it has no effect on whether your application is accepted.
If you tick it and we work together, we may publish:
- Your business name and the city and country you operate in
- The names and roles of the founders or people we worked with
- Photographs taken with your agreement
- The positioning before and after the session, including the wording we arrived at
- A quote from you, attributed to you by name and role
- Commercial outcomes you are willing to share
We will show you anything before it is published. Nothing goes out that you have not seen.
You can withdraw at any time, by emailing contact@qirat303.com. We will remove the case study from our website within 30 days. We cannot recall material already printed or already republished by someone else, and search engines may hold a cached copy for a while after. Withdrawing does not affect the founding rate you already paid, and we will not invoice you the difference for withdrawing.
If you did not tick the box, we will not name you, quote you or photograph your business for publication. We may still describe anonymised patterns, with nothing in them that identifies you.
11. Your rights
Wherever you are, you can ask us to:
- Give you a copy of what we hold about you
- Correct anything that is wrong
- Delete what we hold, where we are not required to keep it
- Stop using it for a particular purpose
- Send it to you or someone else in a portable format
- Withdraw consent you previously gave, including for advertising and for a case study
Email contact@qirat303.com. We will reply within 30 days. We will not charge you and we will not ask why. We may need to confirm who you are before we act, to make sure we are not handing your information to someone else.
If you are in the EU or the UK, these are rights under the GDPR, and you also have the right to object to processing based on our legitimate interests, and to complain to your national data protection authority.
If you are in California, you have the right to know what we collect, to delete it, to correct it, to opt out, and not to be treated differently for exercising those rights. We do not sell personal information for money. However, allowing advertising cookies counts as “sharing” for cross-context behavioural advertising under California law. To opt out, use any of the controls in section 5.3, or email contact@qirat303.com with the subject line “Do Not Sell or Share My Personal Information”.
If you are in Egypt, you have rights under Law No. 151 of 2020 on Personal Data Protection, including access, correction, erasure and withdrawal of consent.
If you are in the GCC, you have equivalent rights under your national law, including the Saudi Personal Data Protection Law and the UAE Personal Data Protection Law.
12. Automated decisions
We do not make any decision about you by automated means alone. Every application is read and decided by a person.
13. Security
The site runs over HTTPS. Access to applications is restricted to us. Payment card details never reach our systems. No system is perfectly secure, and we do not claim otherwise, but the amount of personal data we hold is deliberately small, which is itself a protection.
If a breach ever affects your information in a way that puts you at risk, we will tell you, and we will tell the relevant authority where the law requires it.
14. Children
The Cut Mark is a service for businesses. It is not directed at anyone under 18, and we do not knowingly collect information from anyone under 18. If you believe a child has sent us information, email contact@qirat303.com and we will delete it.
15. Changes to this policy
If we change this policy we will update the date at the top. If the change is significant we will say so clearly on the page and, where we hold your email address and the change affects you, by email.
16. How to reach us, and how to complain
Email contact@qirat303.com, or write to the address in section 1. If you are not satisfied with our answer, and you are in the EU or UK, you may complain to your national data protection authority. In the UK that is the Information Commissioner’s Office at ico.org.uk.