Data protection
Privacy Policy
Last updated: September 2026
This policy explains which personal data we process when you visit this website or contact us, on what legal basis, for how long, and which rights you have. It is written to meet the EU General Data Protection Regulation (GDPR), the Swiss Federal Act on Data Protection (FADP) and the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).
01Controller
The controller responsible for data processing on this website is IMAARI FZCO, Building A1, Dubai Silicon Oasis, Dubai, UAE. Email: info@imaari-media.com. Phone: +971 56 346 1645.
Authorized representative: Hamed Safi, Senior Manager.
02Scope and principles
We process personal data only where necessary to operate this website, to respond to inquiries and to conduct business with our clients. We do not sell personal data, and we do not use cookie-based tracking or advertising technologies on this website.
Where this policy refers to Article 6 GDPR, the corresponding provisions of the Swiss FADP and the UAE PDPL apply to data subjects in those jurisdictions.
03Hosting and server logs
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA ("Vercel"). When you access the website, Vercel's servers automatically process connection data that is technically required to deliver the pages, such as your IP address, the date and time of the request, the requested URL, the referring URL, the browser type and the operating system.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. Server logs are retained for a short period for security and diagnostic purposes and then deleted.
Vercel acts as our processor under a data processing agreement. Where data is transferred to the USA, the transfer is based on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.
04Web analytics
We use Vercel Web Analytics to understand how the website is used, for example which pages are visited and from which countries and device types. Vercel Web Analytics does not use cookies and does not store persistent identifiers on your device. Visits are counted using a hash generated from the incoming request that is discarded after the visit and cannot be used to identify you across sessions or websites.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is the statistical evaluation of website usage to improve the website. Because no cookies or comparable technologies are used to access information on your device, no consent is required under Section 25 TDDDG. You can object to this processing at any time by contacting us, and you may block the analytics script with a content blocker in your browser.
05Contact form
When you use the contact form, we process the data you enter: name, company, email address, country and your message, together with the time of submission. We use this data solely to handle your inquiry and any subsequent correspondence.
Legal basis: Article 6(1)(b) GDPR, as the inquiry is directed at the preparation or conclusion of a contract, and Article 6(1)(a) GDPR for the consent you give by ticking the consent box. You can withdraw your consent at any time with effect for the future by writing to info@imaari-media.com.
The form uses a hidden field and a time-based check to filter automated submissions, and a temporary, IP-based rate limit to prevent misuse. Your IP address is used only for this purpose and is not stored together with your inquiry.
Inquiries are stored in our email system for as long as necessary to handle them. If a business relationship follows, the correspondence is retained in accordance with commercial and tax retention obligations. Otherwise, inquiries are deleted no later than twelve months after the last contact.
06Email delivery via Resend
Messages sent through the contact form are transmitted to us by Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA ("Resend"), an email delivery service. Resend processes the content of your message and the associated metadata for the purpose of delivering it to our mailbox.
Resend acts as our processor under a data processing agreement that includes the European Commission's standard contractual clauses for transfers to the USA. Resend retains delivery logs for a limited period for reliability and abuse prevention.
07Contact by email, phone and WhatsApp
If you contact us by email or phone, we process the data you provide to handle your request. Legal basis: Article 6(1)(b) GDPR or Article 6(1)(f) GDPR, our legitimate interest being to respond to correspondence.
The WhatsApp button on the contact page opens a chat with our business number in WhatsApp. WhatsApp is a service of WhatsApp Ireland Limited for users in the EEA and Switzerland, and of Meta Platforms, Inc. Data is transmitted to WhatsApp only when you actively open the chat and send a message, and it is then processed by WhatsApp under its own terms and privacy policy. No data is transmitted to WhatsApp by merely visiting our website.
08Theme preference in local storage
If you switch between the light and dark colour scheme, your choice is stored in your browser's local storage under the key "theme". This is strictly necessary to provide the function you requested, contains no personal data and is not transmitted to us. You can delete it at any time by clearing your browser's site data.
09Recipients and international transfers
Within the company, only persons involved in handling inquiries and client engagements have access to your data. External recipients are the processors named above, Vercel and Resend. We do not pass personal data to other third parties unless required by law.
IMAARI FZCO is established in the United Arab Emirates, a country for which the European Commission has not issued an adequacy decision. Data you send us is therefore processed outside the EU, the EEA and Switzerland. We protect it with appropriate technical and organisational measures and process it only for the purposes described here. Where the GDPR applies, the transfer to us is necessary for the performance of pre-contractual measures taken at your request (Article 49(1)(b) GDPR) or is covered by the consent you give when submitting the form (Article 49(1)(a) GDPR).
10Retention
We retain personal data only as long as necessary for the purposes described here or as required by law. Server logs are kept short-term, as described in section 03. Inquiries without a subsequent business relationship are deleted no later than twelve months after the last contact. Contract-related correspondence is retained for the duration of the retention periods under applicable commercial and tax law.
11Your rights
Under the GDPR you have the following rights, subject to the statutory conditions:
- Access to the personal data we hold about you (Article 15 GDPR)
- Rectification of inaccurate data (Article 16 GDPR)
- Erasure (Article 17 GDPR)
- Restriction of processing (Article 18 GDPR)
- Data portability (Article 20 GDPR)
- Objection to processing based on legitimate interests (Article 21 GDPR)
- Withdrawal of consent at any time with effect for the future (Article 7(3) GDPR)
- Lodging a complaint with a supervisory authority, in particular in the EU member state of your habitual residence or workplace (Article 77 GDPR); in Austria the Datenschutzbehörde, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC)
How to exercise your rights
Write to info@imaari-media.com or to the postal address given above. We respond within the statutory time limits.
12UAE Personal Data Protection Law
As a company established in the United Arab Emirates, IMAARI FZCO is also subject to Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). We process personal data lawfully, fairly and transparently, for specified purposes, limited to what is necessary, and we keep it accurate and secure.
Data subjects have the right to access, correct, delete and restrict the processing of their personal data, to object to processing and to data portability, and may lodge a complaint with the UAE Data Office. Requests can be sent to info@imaari-media.com.
13Security
This website is delivered over an encrypted connection (HTTPS). Access to inquiry data is restricted to authorised persons. Our processors are contractually bound to appropriate security measures.
14Changes to this policy
We update this policy when our processing activities or the legal requirements change. The current version is always available on this website, with the date of the last update stated at the top.