How we handle your details.

We decide how your details are used. This makes us responsible for them under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

The form has three versions, one for each type of enquiry. The table lists everything they ask for.

We also receive some details automatically:

• Your IP address. We send it to Cloudflare for the security check. The website also keeps it in temporary memory, to stop the form being sent many times in a row. It is not included in the email or the spreadsheet.
• Information about your browser and device, which Cloudflare's security check collects.
• The time you sent the enquiry, and the reference number we give it.

Files can also contain personal details, such as names and addresses on drawings, or people in photographs. Please do not send identity documents, or information about health, religion or other sensitive matters. We do not need them to prepare a quote.

We use your details to reply to your enquiry, to prepare and send a quote, and to contact you about that quote. If the enquiry becomes a project, we also use them to deliver the project.

Our legal basis is your consent, which you give by ticking the box on the form. Where you have asked us for a quote, we also rely on the fact that using your details is necessary to take the steps you requested before entering into a contract with you.

You can withdraw your consent at any time by emailing info@amaf.ae. This does not affect anything we did before you withdrew it. If we already have a contract with you, we may still need some details to fulfil it.

We do not sell your details, share them for anyone else's marketing, or add you to a mailing list.

When you send the form:

1. Your browser sends the form to our website, which runs on Vercel.
2. Cloudflare confirms the form was sent by a person.
3. The website checks your details, and checks that each file is the type it claims to be.
4. It adds a row to our tracking spreadsheet in Google Sheets. The row contains your details and the names of your files, but not the files.
5. It uses Resend to email the full enquiry, with your files attached, to our mailbox. Our mailbox is currently a Gmail account. We plan to move it to our own domain, and will update this policy when we do.
6. It emails you a confirmation, also using Resend.

We do not keep enquiries in a database, and the website keeps nothing after these steps. Your files are never saved on the website. They exist only as attachments to the email in our mailbox.

These companies handle your details on our behalf.

Vercel Inc.

Hosts this website and runs the code that receives your enquiry.

Handles: Everything you submit, while it is being processed. Its logs record your IP address and basic details of each request.

Based in: United States

Cloudflare, Inc. (Turnstile)

Runs the security check on the form, which confirms that a person is sending it.

Handles: Your IP address and information about your browser and device. It does not receive the contents of your enquiry.

Based in: United States, with servers worldwide

Resend

Delivers the enquiry email to us and the confirmation email to you.

Handles: Everything you submit, including your files and your email address.

Based in: United States

Google LLC (Gmail)

Our mailbox. Enquiry emails and their attached files are kept here.

Handles: Everything you submit, including your files.

Based in: United States, with data centres worldwide

Google LLC (Google Sheets)

Our tracking spreadsheet, where each enquiry is logged as one row so our team can track it.

Handles: Everything you submit except the files themselves (only their names are listed), plus status and notes our team adds about your enquiry.

Based in: United States, with data centres worldwide

All of these companies are based outside the UAE, mainly in the United States. They may also process your details in other countries where they or their suppliers operate.

UAE law puts conditions on sending personal data abroad. We send yours abroad on the basis of your express consent, given when you tick the box on the form, and because it is necessary to deal with the enquiry you asked us to handle.

If you do not want your details processed outside the UAE, please do not use the form. Call us on +971 55 669 7693 or visit our factory instead.

We keep each enquiry email, and the matching row in our spreadsheet, for 24 months from the date of the enquiry. Then we delete both.

If your enquiry becomes a project, we keep it with that project's records for as long as we need them for the project and to meet our legal obligations.

Our providers keep their own short-term records, such as Resend's delivery logs and Vercel's request logs. They delete these under their own retention rules. The website clears your IP address from its temporary memory once it is no longer needed, usually within an hour.

Under UAE data protection law you can ask us to:

• Tell you what we hold about you and give you a copy (access).
• Correct it if it is wrong or incomplete.
• Delete it. We delete both the enquiry email and its spreadsheet row.
• Stop or limit using it (objection).
• Withdraw your consent at any time.

To do any of these, email info@amaf.aewith “Privacy request” in the subject. Send it from the address you used for your enquiry, and include the reference number from your confirmation email if you have it. We may ask you to confirm who you are before we act. It costs nothing, and we aim to reply within 30 days.

If you are unhappy with how we have handled your details, you can also complain to the UAE Data Office.

The form is sent over an encrypted (HTTPS) connection. Only our team can open the mailbox and the spreadsheet. The spreadsheet is shared with named people only, never by a public link.

This website does not use analytics or advertising cookies, and our own code stores nothing in your browser. Cloudflare's security check on the contact form saves a small identifier in your browser's storage, under Cloudflare's privacy policy.

The map on our contact page comes from Google Maps. When the map loads, Google receives your IP address and may set its own cookies, under Google's privacy policy.

If you message us on WhatsApp, WhatsApp's privacy policy applies to that conversation.

If we change this policy, we will update the date at the top of this page. Every enquiry we receive records the version of the policy that was in place when it was sent.