Privacy & Cookie Policy

The business responsible for personal data processed for our business purposes is:

Privacy enquiries and rights requests: kaatz@black-eagle.ae.

Hosting and content-delivery providers process information needed to deliver and secure the website, such as your IP address, browser and device information, requested pages and request timestamps. Technical logs may be used for security and troubleshooting. The website is hosted using Lovable's infrastructure; some brand images are served through its content-delivery service.

Fonts are requested from Google Fonts, which receives technical connection data including your IP address. This website does not currently embed social-media feeds, videos, advertising pixels or optional audience analytics.

We store your privacy choice in your browser's local storage under the key primecut:cookie-preferences. It contains the policy version, the time of your choice and confirmation that analytics and marketing are off. It is valid for up to 180 days, is not sent to us by this preference feature and can be reset through Cookie settings or deleted in your browser.

We do not set optional analytics or advertising cookies through our website code. Essential hosting or security cookies may be set by the infrastructure provider. These are used to deliver and protect the service, not to authorise optional advertising.

Saving a preference is not consent to marketing. If we introduce optional tracking, it must remain inactive until you give the relevant consent, with a new notice and updated policy.

When you contact us, we process the contact details, messages and project information you choose to share to respond, prepare a quote and deliver the agreed work. Project materials may include personal data of people appearing in footage. Please share only materials you are entitled to provide and tell us before submitting sensitive or specially regulated data.

WhatsApp project links and LinkedIn application links take you to external services only when selected; they are not embedded on this website. Those providers process data under their own policies. Email enquiries are processed through the email service used for our support mailbox.

Payment processing, when arranged for an order, is handled by Stripe under its own privacy terms. The public website has no embedded payment form, customer account registration or application upload form.

Where the GDPR applies, responding to requested quotes and fulfilling contracts is based on Article 6(1)(b); legally required accounting and compliance processing on Article 6(1)(c); and necessary website delivery, security and ordinary business correspondence on legitimate interests under Article 6(1)(f), subject to your rights. Any optional processing requiring consent must use Article 6(1)(a) and can be withdrawn without affecting earlier lawful processing.

Information may be accessed by authorised team members and service providers needed for hosting, communication, project delivery and payments. We do not sell personal data. Our business is based in the UAE and providers may process information in other countries.

Where GDPR international-transfer requirements apply, an appropriate lawful transfer mechanism and safeguards are required. Contact us before sharing project data if you require details of project-specific processors, processing locations, a data-processing agreement or transfer safeguards.

We keep enquiries and project information only as long as needed for the relevant purpose, agreed work and applicable legal obligations. Exact retention can depend on the project and record type; you can ask us about the retention applicable to your data. We take reasonable organisational and technical measures to protect information, but no internet transmission or storage system can be guaranteed completely secure.

Depending on applicable law, you may have rights of access, correction, deletion, restriction, portability and objection. Where processing is based on consent, you can withdraw it at any time. Email kaatz@black-eagle.ae to make a request; we may need proportionate verification of your identity.

Where the GDPR applies, you may complain to a competent data-protection supervisory authority, including in your country of habitual residence, place of work or the alleged infringement. Other applicable local privacy rights remain unaffected.

We update this policy when our services or data practices change. The date above identifies this version. Any new optional tracking requires an updated notice and a separate choice before activation.