Version 1.0 · Effective 1 November 2026
Privacy policy
We collect as little as possible. The site has no analytics, no advertising and no social media embeds. The only personal data we ask for is what you type into the contact form.
This page is also available in Arabic. Both versions say the same thing; if anything is unclear, email us.
Who we are
Randoms by T7 is a personal creative studio run by Tahnoon Al Salhi in Abu Dhabi, United Arab Emirates. It is not yet a licensed company, and nothing is sold through this website. In this policy, “we”, “us” and “our” mean Tahnoon Al Salhi, trading as Randoms by T7.
We are the controller of the personal data described here. For any privacy question or request, email whatif@randomst7.com.
What we collect, and why
| Data | When | Why | Basis |
|---|---|---|---|
| Your name, email address and message | Only if you send the contact form | To read your enquiry and reply to it | Your consent, given with the tick box on the form |
| The date, time, page language and policy version of your consent | When you send the form | To keep a record that you agreed | Needed to show consent was given |
| Technical data: IP address, browser and device type, the page requested, and spam-check signals | Every visit, and on the contact form | To deliver the site, keep it secure and block automated spam | Strictly necessary to run a secure website |
| Your theme choice (light or dark) | Only if you change it in Settings | To remember your choice | Stored only in your own browser; we never receive it |
We don't ask for, and you shouldn't send, sensitive data such as ID or passport numbers, payment details, health information or passwords. If you send it anyway, we will delete it.
We don't sell personal data, use it for advertising, build profiles or make automated decisions about you.
Who processes your data for us
We use three service providers. They process data on our instructions to provide their service:
- Cloudflare, Inc.: Hosts the website, protects it from attacks and runs the spam check (Turnstile) on the contact form. Location: Global network; data may be processed outside the UAE. Their privacy policy.
- Resend (Plus Five Five, Inc.): Delivers the contact form message as an email to our inbox. Location: Japan (Tokyo region), operated by a United States company. Their privacy policy.
- Google LLC (Google Workspace): Our email inbox, where your message is received and kept. Location: Global; data may be processed outside the UAE. Their privacy policy.
Cloudflare also uses spam-check signals to improve its bot detection, for which it acts as its own controller under its Turnstile privacy addendum.
Data sent outside the UAE
Our providers run their services on servers outside the United Arab Emirates, including in the United States and Japan. When you use the contact form, your message is therefore transferred abroad. We use only established providers that commit to protecting the data they process, and we send them only what is needed.
How long we keep it
- Contact form messages are not stored on the website. They are emailed to our inbox and kept there for up to 12 months after our last contact with you. If the enquiry turns into work, we keep the correspondence for as long as the work and any legal record-keeping require.
- Technical logs are kept by Cloudflare under its own retention periods. We don't keep separate visitor logs.
- Your theme choice stays in your browser until you clear your site data.
Your rights
Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and other laws that may apply to you, you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct data that is wrong or incomplete;
- delete your data;
- restrict or stop how we use it, or object to a use;
- send your data to you, or to someone else, in a usable format.
You can withdraw your consent at any time by emailing us. Withdrawing doesn't affect anything we did before you withdrew. To make a request, email whatif@randomst7.com. We may ask you to confirm your identity, and we aim to reply within 30 days.
If you're not happy with how we've handled your data, please tell us first so we can put it right. You can also complain to the competent data protection authority, which in the UAE is the UAE Data Office, or to the authority in the country where you live.
Children
This site is meant for adults. If you are under 18, please ask a parent or guardian before sending us your details. If we learn that we've received a child's data without that permission, we'll delete it.
Security
The site is served only over an encrypted connection (HTTPS), uses strict security headers, and stores no form data. The contact form is protected against spam and abuse. Only we can access the inbox where messages arrive. No system is perfectly secure; if a breach ever affected your data, we would tell you and the relevant authority as the law requires.
Changes
If we change this policy, we'll update it here with a new version number and date. If the change is significant and affects data we already hold, we'll tell you by email.