Privacy Policy

Who we are

This website (khaleesianahita.com, "the site") is the official brand website of the United Kingdom-based content creator known publicly as Khaleesi (@khaleesianahita). For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), the site owner is the data controller for personal data collected through this site. You can reach us about anything in this policy via the contact form.

What we collect, and why

• Enquiry form. When you send a brand or partnership enquiry we collect the name, company, email address, budget indication, message and any attachments you choose to provide. We use this solely to evaluate and respond to your enquiry and to manage any resulting collaboration. Legal basis: our legitimate interest in responding to business enquiries you initiate, and steps taken at your request prior to entering a contract.
• Payments. If you purchase a package, payment is processed by Stripe on Stripe-hosted pages. Your card details go directly to Stripe and never touch this website or our systems. We receive only order confirmation details (name, email, item purchased) needed to deliver what you bought. Legal basis: performance of a contract. See Stripe's privacy policy.
• Technical data. Our hosting provider (Vercel) processes standard server logs (IP address, browser type, pages requested) to deliver the site securely and defend against abuse. Legal basis: legitimate interest in operating a secure website.

Cookies and tracking

This site does not set advertising or analytics cookies and does not use tracking pixels. The on-site concierge chat runs entirely in your browser and sends nothing anywhere unless you submit the enquiry form. If we ever add privacy-friendly analytics, this policy will be updated first.

Who your data is shared with

We never sell your personal data. It is shared only with the service providers that make the site work:

• FormSubmit — relays enquiry-form submissions to our private inbox.
• Google Workspace — hosts the inbox where enquiries are received and answered.
• Stripe — processes payments (see above).
• Vercel — hosts and serves the website.

Each provider processes data under its own terms and appropriate safeguards. Some providers are based outside the UK (e.g. in the United States); transfers rely on recognised mechanisms such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses.

How long we keep it

Enquiry correspondence is kept for as long as needed to handle the enquiry and any resulting collaboration, and then for a reasonable period for record-keeping, after which it is deleted. Payment records are retained as required by UK tax and accounting law (generally 6 years).

Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to our processing of your personal data, and to data portability. To exercise any of these rights, message us via the contact form — we respond within one month. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.

Children

This site is a business-to-business brand site and is not directed at children. We do not knowingly collect personal data from anyone under 18.

External links

Links to TikTok, Instagram, Amazon and other third-party platforms lead to services with their own privacy policies, which we do not control.

Changes to this policy

We will post any changes on this page and update the date at the top. Significant changes will be highlighted here before they take effect.