Data protection

Privacy policy

Last updated: 23 October 2026

This policy explains what personal data we collect when you visit weborahub.com or contact us, why we collect it, and what rights you have. We apply the EU General Data Protection Regulation (GDPR), the UK GDPR and the UAE Personal Data Protection Law where they apply to you.

1. Who is responsible

2. Hosting and server logs

This website is hosted by Netlify, Inc. (USA). When you visit the site, Netlify automatically processes technical data such as your IP address, date and time of the request, the page requested, browser type and operating system. This is necessary to deliver the website securely (legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure, working website). Netlify stores this data only for a short period. Netlify's privacy policy: netlify.com/privacy.

3. Contact form and email

If you send us an enquiry via the contact form, we receive your name, email address, business name (optional), chosen package (optional) and your message. We use this only to answer your enquiry and, if you wish, to prepare an offer (legal basis: Art. 6(1)(b) GDPR, steps before entering into a contract, and Art. 6(1)(f) GDPR).

To deliver form messages to our inbox we use FormSubmit (formsubmit.co), which forwards the form content to our email address, and Netlify Forms as a backup copy. Our email is hosted by Microsoft 365 (provided through GoDaddy). These providers may process data outside your country, including in the USA.

We keep enquiries for as long as needed to handle your request and any resulting business relationship, and delete them when they are no longer needed, unless we are legally required to keep them longer (e.g. for tax records).

4. Google Analytics (only with your consent)

With your consent, we use Google Analytics 4, a web analytics service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC (USA). It helps us understand how visitors use our website, for example which pages are viewed, how long visits last, and roughly which country visitors come from. Google Analytics uses cookies and similar technologies.

• Consent: Google Analytics is only loaded after you click "Accept" in our cookie banner (legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG). If you click "Decline", it is not loaded.
• Withdraw any time: click "Cookie settings" at the bottom of our homepage and choose "Decline".
• IP addresses: Google Analytics 4 does not store full IP addresses.
• Data transfer to the USA: Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission considers an adequate level of protection.
• Retention: analytics data is kept for up to 14 months.

More information: policies.google.com/privacy.

5. Your consent choice (session storage)

To remember whether you accepted or declined analytics during your visit, we store a small entry ("webora-consent") in your browser's session storage. It contains no personal data and is deleted automatically when you close the browser tab, so we ask for your choice again on your next visit. If you choose a language, we also remember it ("webora-lang") in your browser's local storage until you clear your browser data.

6. Fonts and images from other providers

Our homepage loads fonts from Google Fonts (Google Ireland Limited / Google LLC). Our portfolio example pages also load photos from Unsplash (unsplash.com). To deliver these files, your browser connects to their servers, which means your IP address is transmitted to them (legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a consistent, attractive presentation). These providers do not receive any other data from us.

7. Social media

We have a presence on Instagram (Meta Platforms Ireland Ltd.). If you contact us there, Meta's privacy policy applies to that platform. We only use your messages to reply to you.

8. Your rights

You have the right to:

• get information about the personal data we hold about you (Art. 15 GDPR),
• have incorrect data corrected (Art. 16) or deleted (Art. 17),
• restrict processing (Art. 18) and receive your data in a portable format (Art. 20),
• object to processing based on legitimate interests (Art. 21),
• withdraw your consent at any time, with effect for the future (Art. 7(3)),
• lodge a complaint with a data protection supervisory authority, for example in the EU country where you live.

To use any of these rights, simply email hello@weborahub.com.

9. Security

Our website is only available over an encrypted connection (HTTPS).

10. Changes

We may update this policy when our website or the law changes. The current version is always available on this page.