Privacy notice
Version 2026-10-23
This notice explains what YallaSite collects when you look at your website preview, buy your site or take monthly services, why we collect it, how long we keep it and who helps us process it.
1. Who we are
YallaSite is operated by the company that operates YallaSite, a company registered in the United Kingdom. It is the controller of your personal data and decides how it is used.
2. What we collect
When you open your preview: the pages you view and when, your IP address, the city and country it points to, and your device and browser (for example "iPhone, Safari").
When you buy your site or monthly services: your name, your business name, phone number, email address, billing address, any UAE TRN you give us, your domain choice and your order.
When you ask for changes or message us: what you write to us.
Card details go straight to Stripe. They never reach our servers and we never see your full card number.
3. Why we collect it
To run your preview and checkout: show your site, take your payment, send your receipt and tax invoice, and put your site live.
For sales reporting: to see which previews are opened and where our clients are, so we can follow up at the right time and improve how we work.
To meet our legal and tax obligations, for example keeping invoices.
4. How long we keep it
We keep your data for 24 months after your last visit or order by default, then delete it or make it anonymous. IP addresses from previews are cleared after 24 months.
Invoices and payment records are kept for as long as tax law requires, which can be longer.
5. Who processes it for us
Stripe (payments), Postmark (emails such as receipts), Sentry (error reports, so we can fix problems quickly) and Amazon Web Services (servers, storage and backups). Web fonts load from Bunny Fonts.
Each of them only uses your data to provide their service to us. Some of them process data outside the UAE and the UK, with safeguards such as standard contractual clauses.
We do not sell your data.
6. Your rights
Under the UAE Personal Data Protection Law (PDPL) and the UK GDPR you can ask for a copy of your data, ask us to correct it, or ask us to delete it. You can also object to how we use it.
To ask, message us on WhatsApp from your preview page. We will reply within one month.
If you are not happy with our answer, you can complain to the UAE Data Office or the UK Information Commissioner's Office (ico.org.uk).