← Back to shop
لَا إِلٰهَ إِلَّا ٱللَّٰهُ مُحَمَّدٌ رَسُولُ ٱللَّٰهِ

Privacy policy

Last updated: October 2026

Protecting your personal data matters to me. This policy explains which data is processed when you visit this website and buy a piece, why that happens, and what rights you have.

1. Controller

Nariman Ghanai, 65936 Frankfurt am Main, Germany
Email: nghanai@icloud.com

2. Hosting and server log files

This website is delivered through Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you open a page, your browser transmits technical data that is processed temporarily: IP address, date and time of the request, the requested page, the browser type and the operating system. This is necessary to display the site, keep it stable and secure it against abuse.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and working website). Cloudflare may process data in the USA. The transfer relies on the EU–US Data Privacy Framework and standard contractual clauses.

3. Buying a piece and payment (Stripe)

This website has no cart or order form of its own. When you click "Buy now", you are forwarded to a checkout page of the payment service provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). There you enter your name, email address, delivery address, your phone number if requested, and your payment details. Stripe processes this data as a payment service provider and under its own privacy policy. Depending on the payment method you choose (for example card, PayPal, Klarna or Apple Pay), the provider of that payment method also processes your data.

I receive the data I need to fulfil your order: your name, email address, delivery address, the ordered item, the amount and the payment status. I use it to confirm your order, communicate with you, ship the piece and meet my bookkeeping duties.

Legal basis: Art. 6(1)(b) GDPR (performing a contract) and, for tax and accounting duties, Art. 6(1)(c) GDPR. I delete the data once it is no longer needed. Records I am legally required to keep, such as invoices and payment records, are stored for the statutory retention period of up to ten years. Stripe and other providers may process data in the USA. Transfers rely on the EU–US Data Privacy Framework or standard contractual clauses.

4. Emails about your order

After your purchase you receive a confirmation and receipt from Stripe. I may email you about shipping, for example to send the tracking number, using the email address you entered at checkout.

5. Fonts

This website loads its fonts from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you open a page, your browser connects to Google's servers, which transmits your IP address to Google. I use this for a consistent and attractive presentation of the site.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in an attractive presentation).

6. Links to social media

The links to Instagram and TikTok are plain links. No data is sent to these platforms by visiting this website. Only after you click a link do you reach the respective platform, whose own privacy policy then applies.

7. Contacting me

If you write to me by email or through Instagram, I process your message and the contact details you provide in order to answer your request. I delete it once your request is dealt with, unless I am legally required to keep it.

8. Your rights

You have the right to:

To use any of these rights, just email me at the address above.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI) in Wiesbaden.

9. Changes to this policy

I may update this policy when the website or the legal situation changes. The current version is always the one published on this page.