Who is responsible
SaniaScript is a small art business based in Lahore, Pakistan. SaniaScript is responsible for deciding how customer information is used for this website, orders, commissions, and classes. Questions can be sent to the email address in the footer.
What we collect and why
Orders and delivery
We collect your name, email, phone and WhatsApp number, delivery address, items ordered, payment method, payment status, courier updates, and messages about the order. We need this to confirm the order, verify payment, deliver the artwork, prevent fraud, and provide support. This website does not collect or store card numbers.
Payment proof
If bank transfer is available and you upload a payment screenshot, it is stored in private S3-compatible object storage under a random identifier. Sania checks the payment independently; an uploaded image never marks an order as paid by itself. Please hide unrelated balances or transactions before uploading.
Commissions, reviews, and classes
Commission details and optional reference images are used to prepare a quote and make the requested work. Reviews are connected to a real order to prevent fake submissions. Class records include the student or guardian contact, age, course, batch, consent choice, attendance, payment, and necessary teaching notes. Please do not send identity documents, school names, medical information, or other details that are not needed.
Messages, newsletter, and security
We keep messages needed to answer an enquiry. Newsletter sign-up keeps the name, email, consent record, and unsubscribe status. Limited technical records—such as time, IP-derived security identifiers, browser details, request path, and failed-attempt counts—help stop abuse and investigate faults. Passwords, full form bodies, payment proofs, and full delivery addresses are not intentionally written to application logs.
Browser-only information
Your cart, saved artwork, and unfinished checkout may be stored in your browser. A wall photo used in the room preview stays in your browser and is not uploaded to SaniaScript. See the Cookie Policy.
Optional anonymous analytics
Vercel Web Analytics loads only after you opt in. It measures aggregated visits to public pages using page path, time, referrer, approximate location, browser, operating system, and device type. Private admin, checkout, order, tracking, and student pages are excluded, and SaniaScript removes query strings and fragments before an event is sent.
Service providers and international processing
We share only the information a provider needs for its job. These providers may process information outside Pakistan under their own privacy terms:
- Vercel for website hosting, delivery, short-lived infrastructure logs, and consented anonymous Web Analytics.
- Neon for managed PostgreSQL hosting, connection pooling, backups, and restore history.
- Cloudinary for public catalogue artwork images. Private customer wall-preview photos are not sent to Cloudinary.
- Resend for order, class, commission, privacy-request, and newsletter email delivery.
- Sentry, when configured, for sanitized server error reports that exclude request bodies, customer identifiers, addresses, credentials, payment proofs, and tokens.
- A private S3-compatible storage provider for approved private uploads such as payment proofs and commission references.
- Couriers for the recipient name, phone, address, parcel details, and delivery updates.
- A payment gateway or bank only when that option is enabled. Its own privacy notice applies. SaniaScript does not receive full card details from a gateway.
SaniaScript does not use advertising pixels or cross-site advertising profiles. Optional anonymous analytics remains off until the visitor allows it.
We do not sell or rent personal information.
How long we keep information
These are the normal maximum periods. A record may be kept longer when required for tax, accounting, a dispute, fraud prevention, or another legal duty; access is restricted while that reason continues.
| Record | Normal retention |
|---|---|
| Orders, invoices, verified payments, refunds, and delivery records | 6 years after the end of the relevant tax year |
| Unaccepted commission requests and private reference images | 12 months after the last contact; earlier on a verified request where possible |
| Completed commissions | Order and accounting record: 6 years; unnecessary private reference files: normally removed within 90 days after completion |
| Class payment records | 6 years after the relevant tax year |
| Class attendance, consent, and teaching notes | 2 years after the course ends; class recordings, when provided, expire after 7 days |
| General enquiries | 12 months after the last meaningful contact |
| Published reviews | Until withdrawn or no longer useful; the private order-verification link follows the order retention period |
| Newsletter records | Until unsubscribe; a minimal suppression record may remain so the address is not added again by mistake |
| Security and application logs | Normally 12 months, unless needed for an active investigation |
| Consented anonymous analytics | Normally up to 12 months in the Vercel dashboard; the short-lived visitor identifier is discarded after 24 hours |
| Privacy requests and verification record | 3 years after the request is closed |
| Backups | Removed as the provider’s rolling backup window expires, normally within 30 days |
Your choices
You may ask for a copy of your information, correction, newsletter opt-out, or deletion/anonymisation. We verify the request through saved contact details so another person cannot access or erase your record. Eligible information is deleted or anonymised; records still needed for an order, accounting, security, or a legal claim are restricted and removed when that reason ends.
Use the secure form on this page or email SaniaScript. We aim to acknowledge a request within 7 days and complete it within 30 days, or explain why more time is needed. You may also make a consumer complaint through the appropriate authority where you live.
How we protect information
Private areas require authentication and authorisation. Passwords are stored as slow hashes, not readable text. Forms and uploads are checked on the server, payment proofs use private storage and random names, database access is limited, and production traffic uses HTTPS. No system can promise perfect security; if a serious incident affects you, we will take reasonable steps to contain it and notify affected people or authorities where required.
Children’s class information
A parent or guardian must provide the contact details and consent for a student under 18. Children do not receive passwords. The private student link goes to the enrollment contact. We do not knowingly use a child’s information for marketing.
Changes to this policy
The date at the top changes when this policy changes. Important changes affecting an active order or enrollment will be explained directly where practical. The version that applied when a transaction was made will not be rewritten to remove rights already agreed.