Privacy policy

Legal framework

IACTIF AI CONSULTANCY - FZCO is established in Dubai, United Arab Emirates. The processing of your data is governed primarily by Federal Decree-Law No. 45 of 2021 on the protection of personal data in the UAE.

Where you are a resident of the European Union or our services are directed to you, the General Data Protection Regulation (GDPR) also applies.

Data controller

The data controller is IACTIF AI CONSULTANCY - FZCO (IA.CTIF brand), whose details are in the legal notice. For any question about your data, use the contact form on this website.

Data we collect

Through the contact form: first name, last name, work email address, company name, website (optional), job title, company size, indicative budget, the content of your message and, if you provide it, how you heard about us.

When you visit the site, our hosting provider keeps technical logs, including your IP address, to keep the site secure and running.

We do not collect any sensitive data.

Why we use it

We use your data only to:

• reply to your request and arrange a business conversation;
• prepare a quote and, where applicable, deliver the service;
• keep the site secure and prevent abuse.

Legal basis

Processing is based on pre-contractual steps taken at your request (GDPR Article 6(1)(b)) and on our legitimate interest in answering business enquiries and securing the site (GDPR Article 6(1)(f)).

We do not use your data for targeted advertising.

Cookies

This website uses no advertising cookies, no audience measurement tools and no third-party trackers.

One technical cookie is set, NEXT_LOCALE, which remembers your chosen language (French or English). It is strictly necessary for the site to work and does not require your consent.

Recipients

Your data is accessible only to the IA.CTIF staff who handle your request, and to the technical providers that run the site:

• Vercel (website hosting),
• Supabase (contact form database),
• Resend (sending notification emails).

Transfers outside the European Union

Some of these providers are established in the United States. Transfers are covered by appropriate safeguards, in particular the European Commission's standard contractual clauses and, where applicable, the Data Privacy Framework.

Retention

• Contact requests: 3 years after the last exchange, then deleted.
• Technical logs: limited period, set by our hosting provider.

Your rights

You have the right to access, correct, erase, restrict, object to and port your data. To exercise these rights, write to us through the contact form on this website.

You may also lodge a complaint with the CNIL (cnil.fr), the French data protection authority. If you live in the United Arab Emirates, you may contact the competent authority under Federal Decree-Law No. 45 of 2021 on personal data protection.

Security

Traffic to the site is encrypted (HTTPS) and access to data is limited to those who need it. If a data breach is likely to put you at risk, we will inform you within the legal deadlines.

Minors

This website is intended for professionals. We do not knowingly collect data about anyone under 18.

Changes

We may update this policy. The date of the last update is shown at the top of the page.