Digital4All
Talk to us

Legal

Privacy policy

Last updated: September 5, 2026

What personal data Digital4All collects when you use this site, why, how long we keep it, and the choices you have. Short version: one first-party analytics cookie you can refuse, no advertising trackers, no selling of data, and forms that are used only for what they say.

Who we are

Digital4All (“we”, “us”) publishes this website and is the controller of the personal data described here. We operate from Doha, Qatar. For anything to do with your data, email enquiries@digital4all.ai or use the contact page. We have not appointed a data protection officer; the operator handles requests personally.

What we collect, and why

  • Enquiries (contact and consulting forms). Your name, email address and what you type — optionally company, country and company size — plus the page you sent it from and any campaign tags in the address you arrived on. Used only to reply to you and, if you engage us, to run the project. Never added to a mailing list.
  • Newsletter. Your email address, the page you subscribed from and your confirmation status. We use double opt-in: nothing is sent until you confirm from your inbox. (While the newsletter is being set up, no issues are sent at all.)
  • Template downloads. The email address you give to receive a template and which template you asked for, so we can deliver it and let you know if it is updated.
  • Site analytics (first-party, no third-party scripts). For each page you view: the page path, the referring address, your device class (phone, tablet, desktop — read from the browser user-agent string), any campaign tags, the country your connection appears to come from, and a random visitor identifier stored in a cookie (see “Cookies”). We do not use Google Analytics, advertising pixels or any third-party tracker.
  • Affiliate clicks. When you click a link that goes through our /go/ redirect we record which link it was, the page you clicked from, your device class, campaign tags, the same visitor identifier, and a truncated, salted one-way hash of your IP address. The hash is used only to de-duplicate clicks and spot abuse; it cannot be turned back into your address. Nothing about you is sent to the merchant beyond the click itself and our affiliate tag.

IP addresses and location

Your IP address reaches our server with every request, as it does with every website. We do not store it. For analytics we look the address up once, in memory, against an offline country database bundled with the site, keep only the two-letter country code, and discard the address. No geolocation service or other third party receives it. Country data is from DB-IP IP-to-Country Lite, licensed under CC BY 4.0.

Cookies and browser storage

We set one cookie on the public site and one in the admin area:

  • sp_sid — a random identifier with no personal data in it, set on your first page view and kept for 12 months. It lets us count how many different browsers visit and which pages a visit covers. It is first-party only, is never shared, and is not used for advertising. If your browser sends the “Do Not Track” signal we do not set it and we do not record your page views at all.
  • sp_session — the login cookie for our own admin area. Visitors never receive it.

We also use your browser’s session storage (not a cookie) to remember campaign tags from the address you arrived on, so a form you submit later in the same tab can be attributed to that campaign. It is cleared when the tab closes.

Third parties. Videos hosted on YouTube load only after you press play, through YouTube’s privacy-enhanced embed (youtube-nocookie.com); at that point Google may set its own cookies under Google’s privacy policy. When you follow a link to a merchant such as Amazon, that merchant sets its own cookies under its own policy — Amazon’s attribution cookie, for example, lasts 24 hours.

Your choice. You can block or delete the sp_sid cookie in your browser settings, or switch on “Do Not Track”; the site works exactly the same without it. We are reviewing whether visitors from the UK and EU should be asked before this analytics cookie is set; until then the Do Not Track control above is the opt-out.

Where the UK or EU GDPR applies to you, we rely on: consent for the newsletter and template emails (withdraw any time by unsubscribing); steps at your request before a contract for enquiries; legitimate interests for first-party analytics, abuse prevention and attributing affiliate commissions to the page they came from — processing we have kept minimal and pseudonymous so it does not override your interests. Where Qatar’s Personal Data Privacy Protection Law (Law No. 13 of 2016) applies, we process data transparently for the stated purposes and with the safeguards described on this page.

Who we share data with

We do not sell personal data and we do not share it with anyone for their marketing. The site runs on a server operated by a hosting provider that processes data on our instructions. When newsletter sending is switched on, an email delivery provider will process subscriber addresses on our behalf and will be named here. Merchants you click through to receive the click and our affiliate tag, nothing else. We disclose data if the law requires it.

International transfers

We are based in Qatar and our server may be located outside your country, so your data may be processed outside the UK and EU. We rely on the small, pseudonymous nature of what we collect and on contractual protections with our providers; if you would like more detail on the safeguards for a particular transfer, ask us.

Retention

  • Enquiries and leads: kept while we work together and for up to three years after our last contact, for business records, then deleted.
  • Newsletter: until you unsubscribe. We then keep your address on a suppression list so we do not email you again.
  • Template downloads: up to 24 months after the download.
  • Analytics and affiliate-click records: up to 24 months, after which rows are deleted or reduced to aggregate counts. The IP hash they contain is already irreversible.

Your rights

Depending on where you live you can ask us to access, correct, export or delete your personal data, to restrict or object to processing, and to withdraw consent. Email enquiries@digital4all.ai and we will answer within one month. You can also complain to your data protection authority — in the UK the Information Commissioner’s Office, in the EU your national authority, in Qatar the National Cyber Security Agency’s data privacy office.

Security and children

The site is served over HTTPS only, the admin area is password-protected, IP addresses are hashed or discarded, and we collect the minimum needed. No system is perfectly secure; if we ever learn of a breach affecting your data we will tell you and the relevant authority as the law requires. The site is written for businesses and is not directed at children under 16; we do not knowingly collect their data.

Changes

Changes are posted here with a new date above. If we materially change how we handle newsletter data we will tell subscribers by email first.