Privacy Policy

What we collect and why

Contact form. Your name, work email, and project description, plus your company name and the service you are interested in if you choose to provide them. Your IP address is included in the notification email we receive, to help us filter spam. We use this data solely to respond to your inquiry and take steps toward a potential engagement at your request.

Analytics. We use Google Analytics 4 to understand how the site is used (pages visited, approximate location, device type). Analytics cookies are set only with your prior consent via the cookie banner. If you decline, no analytics cookies are stored. You can withdraw consent at any time by clearing your cookies.

Call booking. You can book a discovery call through the Cal.com scheduler embedded on our Contact page. The details you enter there (name, email, selected time, and any notes) are processed by Cal.com, Inc. under its own privacy policy, and shared with us so we can hold the call. We use them only to prepare for and run that call.

Theme preference. Your light/dark choice is stored locally in your browser and never leaves your device.

Legal bases

We process contact-form data because it is necessary to respond to your request and to take pre-contractual steps you have asked for (PDPL Art. 4 exceptions; GDPR Art. 6(1)(b) and (f)). We process analytics data only on the basis of your consent (PDPL Art. 4; GDPR Art. 6(1)(a)).

Who we share data with

We do not sell personal data, and we do not share it with anyone for marketing. Data is handled by a small set of service providers strictly to operate this site: Hostinger (web and email hosting; servers may be outside the UAE, including in the EU); Google (Google Analytics 4, only with your consent; Google LLC, USA); Cal.com, Inc. (call booking on the Contact page; USA).

International transfers

Because the providers above operate infrastructure outside the UAE (including the EU and the United States), submitting the form, accepting analytics, or booking a call involves transferring your data outside the UAE. We limit these transfers to providers that commit to recognised data-protection safeguards, consistent with the PDPL’s cross-border transfer rules and GDPR Chapter V. Details are available on request.

Retention

Form submissions are kept in our mailbox for as long as needed to handle your inquiry and any resulting business relationship, then deleted. Google Analytics data is retained for 14 months. Cal.com bookings are retained per your booking relationship with us.

Security

The site is served over HTTPS; form submissions travel encrypted (TLS) to our mail server; access to the receiving mailbox is restricted. If a personal data breach occurs that risks your privacy, we will notify the UAE Data Office and affected individuals as required by the PDPL.

Your rights

Under the PDPL (and GDPR where applicable) you have the right to access, correct, erase, or restrict processing of your personal data; to object to processing; to receive your data in a machine-readable format; and to withdraw consent at any time without affecting prior processing. To exercise any of these rights, email hello@nthreads.com. We respond within 30 days and never charge for a first request.

Complaints

If you believe we have processed your data unlawfully, you may lodge a complaint with the UAE Data Office. Visitors in the EU/EEA or UK may also complain to their local supervisory authority.

Children

This site is a business-services site and is not directed at children. We do not knowingly collect personal data from anyone under 18; if you believe a minor has submitted data, contact us and we will delete it.

Changes and contact

If this policy changes, we will update this page and the date above. Data protection questions and rights requests: hello@nthreads.com.