Privacy Policy — Amirah Digital Services

Amirah Digital Services

Last updated: June 2026 · GDPR & LOPDGDD Compliant · Data Controller: Amirah Digital Services, Spain

Your privacy is our highest priority. This policy explains exactly what data we collect, why we collect it, how we protect it, and what rights you have over it. We collect only what is strictly necessary. We never sell your data. Ever.

1. Who We Are

Data Controller: Amirah Digital Services

Location: Spain

Contact: amiraqsx@gmail.com

Amirah Digital Services operates as a digital content creation service. All data processing activities are subject to Spanish law, the EU General Data Protection Regulation (GDPR — Regulation 2016/679), and the Spanish Organic Law on Data Protection (LOPDGDD 3/2018).

2. Data We Collect

Data Type	What exactly	Why we collect it	Legal basis
Account data	Email address, username chosen by user	To create and manage your account	Contract performance
Payment data	Transaction reference, amount, date. We never store card numbers.	To process and record payments	Legal obligation + Contract
Communication data	Messages sent through the private chat, content requests	To fulfil your personalised content request	Contract performance
Technical data	IP address, device type, browser, session data	Security, fraud prevention, platform performance	Legitimate interest
Age verification	Age confirmation (yes/no only — we do not store ID documents)	Legal compliance — DSA age verification obligation	Legal obligation
Cookies	Session cookies, language preference, consent record	Platform functionality and legal consent logging	Consent + Legitimate interest

What We Do NOT Collect

We do not collect government-issued ID or passport data
We do not collect or store full card numbers (handled by payment processor)
We do not collect data about your race, ethnicity, health, or religion
We do not use behavioural advertising trackers
We do not sell, rent, or share your data with third parties for marketing purposes

3. How We Use Your Data

We use your personal data only for the following purposes:

To deliver services you have purchased — creating and delivering personalised content
To manage your account — login, preferences, communication history
To process payments — securely via authorised payment processors
To communicate with you — service updates, delivery notifications, support
To comply with legal obligations — tax records, age verification, GDPR obligations
To protect the platform — fraud detection, abuse prevention, security monitoring

4. Data Retention

We retain your data only for as long as necessary. Our retention schedule:

Account & communication data Duration of account + 12 months

Payment transaction records 7 years (Spanish tax law obligation)

Technical / security logs 90 days

Cookie consent records 13 months

Age verification records Duration of account

Deleted account data Erased within 30 days of deletion request (except legal obligations)

5. Third Parties & Data Processors

We work with a limited number of trusted third-party processors. All are bound by GDPR-compliant data processing agreements:

Processor	Purpose	Location
Stripe	Payment processing	USA / EU (GDPR compliant, SCCs in place)
Cloudflare	Hosting, CDN, security	USA / EU (GDPR compliant)
Bunny.net	Private video delivery	EU (Slovenia)
Stream Chat	Private messaging infrastructure	USA / EU (GDPR compliant, SCCs in place)

We do not share your personal data with any third party beyond those listed above, and never for advertising or marketing purposes.

6. International Data Transfers

Some of our third-party processors operate outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions where applicable
Data Processing Agreements with all processors

If you are located outside the EEA (including in the Middle East or other regions), please note that by using our platform you consent to your data being processed in Spain and, where necessary, in countries with appropriate safeguards as described above.

7. Your Rights

Under GDPR and LOPDGDD, you have the following rights regarding your personal data:

✦ Right of Access

Request a copy of all personal data we hold about you

✦ Right to Rectification

Correct any inaccurate or incomplete data

✦ Right to Erasure

Request deletion of your data ("right to be forgotten")

✦ Right to Restriction

Limit how we process your data in certain circumstances

✦ Right to Portability

Receive your data in a structured, machine-readable format

✦ Right to Object

Object to processing based on legitimate interests

✦ Withdraw Consent

Withdraw consent at any time without affecting prior processing

✦ Right to Complain

Lodge a complaint with the Spanish Data Protection Authority (AEPD)

To exercise any of these rights, contact us at: amiraqsx@gmail.com. We will respond within 30 days. Identity verification may be required before processing your request.

Spanish Data Protection Authority (AEPD)

If you believe your rights have not been respected, you have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD):

Website: aepd.es
Address: C/ Jorge Juan, 6, 28001 Madrid, Spain

8. Cookies

Strictly Necessary Cookies

These cookies are essential for the platform to function. They cannot be disabled:

Session cookie — maintains your login session
Age verification cookie — records that age confirmation has been completed
Language preference cookie — remembers your language selection (EN/AR)
Consent cookie — records your cookie consent decision

Analytics Cookies (Optional — Consent Required)

We may use privacy-first analytics to understand how the platform is used. These are anonymous and contain no personal identifiers. You can opt out at any time via the cookie settings.

What We Do NOT Use

We do not use advertising cookies, Facebook Pixel, Google Ads tracking, or any third-party behavioural targeting technology.

9. Security

We implement appropriate technical and organisational security measures to protect your data, including:

HTTPS encryption across the entire platform
DRM protection on all video content
Encrypted private messaging
Access controls limiting who can access user data
Regular security reviews

In the event of a personal data breach that poses a risk to your rights, we will notify the AEPD within 72 hours and affected users without undue delay, as required by GDPR Article 33.

10. Children's Privacy

This platform is strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has accessed our platform, please contact us immediately at amiraqsx@gmail.com and we will take immediate action to delete any data collected.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes by email. The date of the most recent revision is shown at the top of this document. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related questions, requests, or concerns:

Email: amiraqsx@gmail.com
Response time: Within 30 days (GDPR requirement)
Location: Spain