What we collect,
and why.

What we collect when you simply read this site

We run no analytics and build no profile of you. This site sets no cookies, carries no advertising or tracking pixel, and loads no fonts, scripts or media from a third-party server. Typefaces are served from this site itself.

What does exist, as on any website, is the ordinary technical log kept by the server that delivers these pages: the requesting IP address, the page requested, the time, and the browser identifier your device sends. An IP address can count as personal information under the law cited below, so we would rather name it than imply nothing is recorded at all. Those logs are generated by the hosting infrastructure, are used only to keep the site running and secure, and are not combined with anything else, sold, or used to identify you.

What we collect when you send us a message

Only what you type: your name, your company if you give one, your email address, and your message. Those four are the whole of the personal information the form asks for. It also carries two hidden technical fields — a fixed subject line, and an empty decoy field used to catch automated spam — neither of which collects anything about you.

The form is delivered by Formspree, a form-processing service operating from the United States. Your submission passes through Formspree and arrives in our mailbox. Formspree holds a copy on our behalf and applies automated spam filtering. If you would rather not use a third-party service, write to us directly at the address below — it reaches exactly the same place.

What your browser stores

One item: whether you switched the background audio on or off, so the site can respect that choice on your next visit. It is stored by your browser on your own device, it is never transmitted to us, and clearing your browser data removes it. It is not a cookie and it is not used for any other purpose.

Why we hold what you send

To answer you, and to carry on the conversation you started. That is the only reason. We do not sell, rent, trade or share enquiry details with anyone for marketing, and we do not add you to a mailing list on the strength of an enquiry.

Commercial information shared with us in an enquiry — a capability, a programme, a customer, a timeline — is treated as confidential, subject to any legal obligation to disclose. It is not repeated to other clients, and it is not published in case studies or articles without your agreement.

How long we keep it

Enquiries that do not lead anywhere are deleted within twelve months. Where an enquiry becomes an engagement, correspondence is retained for as long as the relationship lasts and for the period afterwards required by UAE commercial record-keeping obligations.

You can ask us to delete your details sooner, at any time, and we will — except for any part we are legally required to keep, which we will identify to you rather than quietly retain.

Who else sees it

Two service providers, and the infrastructure each of them runs on: the form processor described above, and the email provider that hosts our mailbox. Both act on our instructions, and both in turn rely on their own hosting and delivery suppliers, as every such service does. Beyond that chain we transfer enquiry data to no one — not to advertisers, not to data brokers, not to other clients — except where a law or a court obliges us to.

Because our form processor is based in the United States, information you send through the form crosses borders on its way to us. Sending us a message means you are content for it to be handled that way. Emailing us directly avoids that route.

Your rights over your own information

You may ask us what we hold about you, ask for it to be corrected, ask for a copy, ask us to delete it, or object to our holding it at all. Write to the address below and we will respond within thirty days. There is no charge.

We handle personal information in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. Where a visitor writes to us from the European Union or the United Kingdom, we apply the equivalent rights under the GDPR.

Security, stated plainly

This site is served over an encrypted connection and holds no database of its own — it is a set of static pages, so there is no visitor account, no password and no stored record here to breach. Enquiries live in our email and in our form processor, both access-controlled.

No system is perfectly secure, and we will not claim otherwise. Please do not send classified, export-controlled or otherwise restricted material through a web form or an ordinary email. If a discussion needs to be held securely, say so in your first message and we will arrange an appropriate channel before anything sensitive is exchanged.

Children

This is a business-to-business and government-facing site. It is not directed at children and we do not knowingly collect information from anyone under eighteen.

Changes to this policy

If we change how the site handles information, we update this page and the date at the top. Keeping the two in step is the point of this document, and if you ever find a statement here that no longer matches what the site does, tell us and we will correct it.