Privacy policy

What we collect

The only place this site asks for personal data is the contact form. When you complete it we receive:

• –Name
• –Work email
• –Phone, if you provide it (optional field)
• –Company
• –Practice of interest and, if you provide it, the budget range
• –The message you write
• –Confirmation that you ticked the consent box, with the date and time you sent the form

We run no advertising on this site, we do not profile visitors, and we neither sell nor share data with third parties for commercial purposes.

Technical data. When a page loads, our hosting provider processes your IP address, browser type and the page requested, because a web server cannot deliver a page without them. The country derived from your IP address is used once, to choose the site's language when your browser does not state one, and we do not store it. When you send the form, your IP address is used to stop repeated submissions and is not kept with your message. Our hosting provider keeps its request logs for a short period under its own policy.

What we use it for

Only to answer your enquiry and, if a conversation follows, to assess and prepare a possible engagement. Nothing else. You are not added to a newsletter or a marketing list.

On what legal basis

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), we process your enquiry on the basis of your consent, given when you tick the box and send the form, and because it is needed to take the steps you asked for before a possible contract. For visitors in the European Economic Area, the basis under the GDPR is our legitimate interest in answering business enquiries sent to us (Article 6(1)(f)) and, where you write on your own behalf, the steps you asked for before a contract (Article 6(1)(b)). Technical data is processed on the basis of our legitimate interest in delivering and securing the site. You may withdraw your consent at any time by writing to us. Withdrawal does not affect processing carried out before it. Giving us your details is not a legal or contractual requirement, but without an email address we cannot reply. We make no decisions about you by automated means alone.

Who has access

Only the Benecor team reads your message. These service providers process data on our behalf, under contracts that limit them to that purpose:

• –Vercel Inc. (United States): hosting, content delivery and the server code that handles the form.
• –Resend, operated by Plus Five Five, Inc. (United States): sends the email the form generates. Resend keeps a copy of that email for up to 30 days, then deletes it.
• –Proton AG (Switzerland): the encrypted mailbox where your message is received, stored and answered.

Your data is therefore transferred outside the UAE, to the United States and Switzerland. Under the UAE Personal Data Protection Law these transfers rest on contracts that require the providers to protect the data to the standard the law sets, and on the fact that they are needed to answer the request you made. For visitors in the European Economic Area, Switzerland has an adequacy decision from the European Commission, and our United States providers are certified under the EU-U.S. Data Privacy Framework or bound by the Standard Contractual Clauses approved by the Commission.

How long we keep it

Enquiries that do not lead to work are deleted 12 months after our last exchange with you. If we start working together, the enquiry becomes part of the client file and is kept for the period UAE commercial and tax law requires. The copy held by our email delivery provider is deleted after 30 days.

Cookies

This site uses no advertising or behavioural analytics cookies, which is why there is no consent banner. One strictly necessary cookie may be set:

• –NEXT_LOCALE: set only when you pick a language with the EN and AR switch, so the site keeps that language while you browse. It is deleted when you close your browser. It holds nothing that identifies you.

Your rights

You may ask us at any time for access to your data, a copy in a portable format, correction, erasure or restriction of processing, or you may object to it. We reply within 30 days. If we need to confirm who you are before acting on a request, we will tell you what we need.

If you are not satisfied with our answer, you may complain to the UAE Data Office, the authority the UAE Personal Data Protection Law makes responsible for complaints, or, if you are in the European Economic Area, to the data protection authority of your country.

If a security incident affects your data in a way that could harm your privacy, we will tell you and the competent authority as the law requires.

Security

The site is served over encrypted connections only (HTTPS) and applies a restrictive content security policy. Your message travels encrypted from your browser to our server and from there, through our email delivery provider, to our mailbox, where it is stored encrypted. Only the people at Benecor who answer enquiries can read it.

Changes to this policy

If we change how we handle personal data, we update this page and the last-updated date at the top.