Privacy notice

This site is run by Hasan Said Alhalabi, trading as ARZ Labs, in Lebanon. He is the person responsible for the processing described on this page. ARZ Labs is a sole trader, not a registered company, so there is no company registration number or VAT number to give.

Write to info@arzlabs.dev with any question about this notice.

The contact form on this site collects your name, your email address and the message you type in. That is everything: there are no optional fields, no phone number field and nothing asking how you heard about us.

Separately, our edge server records the usual entries any web server does for every page you load: your IP address, the page requested, the response status and the browser's user-agent string.

We also use Plausible, a privacy-focused analytics service, to count how many people visit each page. It records the page viewed, the referring site, an approximate country derived from your IP address, and marketing tags in the URL (such as utm_source) if present — never your IP address itself, never a cookie, and never anything that identifies you individually. See "Site analytics" below for the detail.

We use your name, email and message for one purpose: to read your enquiry and reply to it. Where your enquiry is a step toward working together, our lawful basis is Article 6(1)(b) of the GDPR, processing necessary to take steps at your request before entering into a contract. Otherwise it is Article 6(1)(f), our legitimate interest in answering people who write to us.

We record web-server requests and count form submissions per IP address to keep the site available and to stop the form being flooded with spam. That basis is also Article 6(1)(f): the security and availability of the service, which Recital 49 of the GDPR names directly.

If you are covered by Lebanese Law No. 81 of 2018 on Electronic Transactions and Personal Data: sending this form is your agreement to the processing described on this page, which is what Lebanese law asks for. If you are covered by the GDPR or the UK GDPR: we do not rely on your consent for this processing, and the checkbox on the form is not a consent box: it only confirms you have read this notice. A tick you had to give in order to send a message would not be freely given, so consent would be the wrong basis here, and telling you it was consent would misdescribe what we are doing.

We ask for the minimum that lets us reply. We do not profile you, we do not build a marketing list from enquiries, and this site sends no marketing email.

We use aggregate analytics to understand which pages get read and whether our marketing links actually bring visitors, under Article 6(1)(f), our legitimate interest in running a site people can find and use. Plausible does not process personal data as GDPR defines it — no cookie, no persistent identifier, no cross-site tracking — so there is no separate consent basis to state for it.

Hostinger hosts our mailbox at info@arzlabs.dev and runs the mail server your message travels through, so Hostinger processes your message on our behalf. Hostinger publishes its own list of data-centre locations for its mail service; we are established in Lebanon and read your message here.

The server this site runs on is a virtual private server we manage ourselves. Nobody else receives your message. We do not sell it, we do not share it with advertisers, there is no third-party form service on this site, and the only third-party script here is the privacy-focused analytics described in "Site analytics" below.

Your message arrives in our own mailbox and that is where it stays. We do not copy it into a database, because this site has no database. We have no automatic deletion, so a message stays until we delete it by hand, typically once an enquiry is clearly finished and we have no reason to keep it. If you want yours gone sooner, email info@arzlabs.dev and we will delete the message and our replies and tell you when it is done.

Our edge server keeps its own access logs, which include your IP address, for as long as the server needs the space to keep running. We do not yet have a fixed retention period configured, and setting one is on our list; this page will state the number once it is enforced by the server rather than promised by us.

For up to an hour after you last use the contact form, we hold your IP address in server memory only, purely to stop the form being flooded. It is never written to disk, it is never linked to a message you sent, and it stops counting toward the limit once the hour is up.

You can ask us for a copy of what we hold about you (Article 15 GDPR), have it corrected (Article 16), have it deleted (Article 17), have us restrict what we do with it (Article 18), or object to our processing of it entirely (Article 21). We grant these rights to everyone who writes to us, wherever you are, not only to visitors the GDPR covers.

We answer access, correction, erasure and objection requests within 10 days. Corrections and erasure are free. Write to info@arzlabs.dev.

We do not ask for your consent to reply to you, so there is nothing to withdraw. If you object to us keeping your message, we will delete it unless we have a compelling reason not to, which for an ordinary enquiry we do not.

We would rather you told us first, at info@arzlabs.dev, so we can put it right. If you are in the EU or the UK, you also have the right to complain to your national data protection authority, or to the ICO at ico.org.uk if you are in the UK. We are established in Lebanon, where oversight of Law No. 81 of 2018 sits with the Ministry of Economy and Trade, and you can also apply to the competent Lebanese courts, in particular the Magistrate of Summary Justice.

There is no automated decision-making that produces a legal effect for you, and there is no profiling. Two automatic checks run when you submit the form: a hidden field that no real visitor ever sees catches bots, and a count of submissions per IP address blocks a sixth message within an hour. If either of these stops a genuine message of yours, email or call us directly and a person will read it.

We use Plausible Analytics (Plausible Insights OÜ, Estonia) to see how many people visit this site, which pages they read, and which links actually bring visitors. Plausible does not use cookies or any other persistent identifier, does not store your IP address, and cannot follow you across other websites: what we see is aggregate counts, not a profile of you.

Plausible is established in the EU, so no international transfer outside the EU/EEA is involved. See plausible.io/data-policy for their own notice.

This site sets no cookies and stores nothing in your browser. See our cookie notice for the detail.

You do not have to use the contact form at all. You can email info@arzlabs.dev instead. If you do use the form we need your name, your email address and your message, because without an address we have no way to reply.