Privacy Policy
This policy explains what STK collects when you visit stk.sa or send an enquiry, why, where it is kept and for how long. It describes what the site actually does, not what a policy usually says.
Last updated 8 September 2026
What we collect
When you send an enquiry: your name, your entity or organization, your work email, the type of project you select and the message you write.
Alongside the enquiry, to protect the form from abuse: a one-way hash of your IP address (the address itself is never stored), your browser's user-agent string and the page you arrived from.
When you browse: the site loads its typefaces from Google Fonts, which receives your IP address when the font files are requested, and it runs a business-visitor identification script that may set cookies and try to associate your visit with the organization you belong to. The site carries no advertising trackers.
Why we use it
To answer your enquiry and prepare a proposal, and to send you one automatic confirmation that it arrived.
To keep the enquiry form usable, by rate-limiting automated submissions and recognising abuse.
To understand which organizations show interest in the studio's work.
Under the Saudi Personal Data Protection Law, we rely on your consent when you submit the form and on STK's legitimate interest in running and protecting its own site.
Where it goes
Enquiries are stored in a managed database hosted in the European Union and delivered to info@stk.sa through a transactional email service. The site itself is served from a hosting network with edge locations worldwide.
These providers process the data on STK's behalf under their own security commitments. STK does not sell personal data and does not share it with anyone else, except where the law requires.
How long we keep it
Enquiries are kept while we answer and follow up, and for up to twenty-four months afterwards for the studio's records, unless you ask us to delete them sooner.
The abuse-prevention records are consulted only for the hour after a submission.
Your rights
You can ask what we hold about you, ask for it to be corrected or deleted, or object to how it is used. Write to info@stk.sa from the address you used; we acknowledge within two working days and complete the request within the period the law allows.
If you are not satisfied with our answer you may raise the matter with the Saudi Data & AI Authority (SDAIA), the competent authority under the law.
Cookies and local storage
The site sets no cookies of its own. It remembers your language choice in your browser's local storage, which never leaves your device. The visitor-identification script may set its own cookies; blocking them in your browser does not affect the site.
Changes
We update this policy when the site changes. The date at the top shows the latest revision.
Contact
Questions about this policy or your data can be sent to info@stk.sa.