Privacy notice
In short
- This site sets no cookies, runs no analytics and loads nothing from third parties. Fonts are served from our own host.
- Two things involve personal data: the technical logs of our hosting provider when you load a page, and the email you send us when you get in touch.
- The "Book a call" form runs entirely in your browser. It only pre-fills an email in your own mail application; nothing is sent to us until you send that email yourself.
Who we are
The controller responsible for this website is [Legal entity name], trading as codebyte, [registered address], Dubai, United Arab Emirates, email hello@getcodebyte.com. Full company details are in the legal notice.
We process personal data under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and its implementing regulations. The competent supervisory authority is the UAE Data Office.
Hosting and technical logs
This website is delivered by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, through its global network. When you open a page, your browser automatically sends the following to Cloudflare's servers: your IP address, date and time of the request, the page requested, the referring page (if any), and your browser and operating system identifiers.
Cloudflare uses this data to deliver the pages you request, to keep the site available and to detect and block attacks. We have request logging switched on for troubleshooting; those logs are kept for a few days and then deleted automatically. We do not use them to build profiles or to identify individual visitors.
Cloudflare processes this data on our behalf under its Data Processing Addendum. Because Cloudflare serves content from the data centre nearest to you, the data may be processed outside the United Arab Emirates, including in the European Union and the United States. Such transfers are covered by the contractual safeguards required by the PDPL for cross-border transfers. Cloudflare's own privacy policy is at cloudflare.com/privacypolicy.
Cloudflare may set a strictly necessary security cookie if it has to challenge suspicious traffic. That cookie serves only to distinguish humans from automated traffic; it is not used to identify or track you.
Contacting us and booking a call
You can reach us by email, or via "Book a call". The booking dialog asks for your name, work email, role, company and annual revenue band so the right person can join the call, prepared. The dialog runs entirely in your browser: the site does not transmit or store what you enter. When you click Continue, your own email application opens with a pre-filled message, and only when you send that message do we receive the details.
We process what you send us — typically your name, email address, company, role, revenue band and message — to answer your enquiry, to prepare and hold a discovery call, and to follow up on it. We rely on the fact that you have asked us to take these steps ahead of a possible contract; where that does not apply, we rely on your consent, which you can withdraw at any time by emailing us.
Emails are stored in our business email account, which is hosted by [email provider, e.g. Google Workspace / Microsoft 365, and the region in which the mailbox is hosted]. The provider acts as our processor under a data processing agreement; where its servers are outside the UAE, the transfer is covered by contractual safeguards as required by the PDPL.
We keep enquiries for as long as needed to deal with them. If no business relationship follows, we delete the correspondence no later than twelve months after our last contact. If we work together, correspondence and contract documents are kept for the term of the engagement and the statutory retention periods under UAE law (generally five years for commercial and tax records).
Cookies and local storage
This site sets no cookies of its own and stores nothing in your browser's local storage. The only possible exception is the security cookie described under Hosting, which Cloudflare sets only when it has to verify that a request comes from a human.
Sharing your data
We do not sell personal data and do not share it for marketing. We share it only with the service providers named in this notice, who act on our instructions; with our professional advisers where necessary; and with authorities or courts where the law requires it or where we need to establish or defend legal claims.
Transfers outside the UAE
We are based in Dubai. Our hosting and email providers operate globally, so personal data may be processed outside the United Arab Emirates. We only allow this where the destination provides an adequate level of protection or where the provider is bound by contractual clauses that meet the PDPL's requirements for cross-border transfers.
Security
All connections to this website are encrypted (TLS). Access to enquiries is restricted to the people who need it to respond to you.
Your rights
Under the PDPL you have the right to:
- ask whether we process your personal data and receive a copy of it;
- receive that data in a structured, machine-readable format;
- have inaccurate or incomplete data corrected;
- have your data erased where it is no longer needed for the purpose it was collected for, or where you withdraw consent;
- restrict processing, or ask us to stop processing altogether, including for direct marketing;
- object to decisions based solely on automated processing (we make no such decisions);
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, email hello@getcodebyte.com. We will respond within one month. If you believe we have processed your data in breach of the PDPL, you can lodge a complaint with the UAE Data Office.
Visitors from the EU, UK and Switzerland
If you visit from a jurisdiction where the GDPR, UK GDPR or the Swiss FADP applies to our processing, the legal bases for the processing described above are the performance of pre-contractual steps at your request (Art. 6(1)(b) GDPR) and our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). You have the rights set out in those laws, including the right to complain to the supervisory authority in your country of residence.
Children
This website is aimed at businesses and is not directed at persons under 18. We do not knowingly collect personal data from children.
Changes to this notice
We update this notice when our processing changes. The date at the top shows the current version.
Contact
Questions about privacy on this site: hello@getcodebyte.com, or by post to [Legal entity name], [registered address], Dubai, United Arab Emirates.