Tilasmi العربية Book a call

Home/Legal/Privacy notice

Privacy notice

This notice covers tilasmi.com: what we collect when you use the site, why, and what you can do about it. It is written in plain English on purpose. It is not a substitute for legal advice, and Tilasmi is not a law firm.

Who is responsible for your data

Tilasmi - F.Z.C, a Free Zone Company registered with the Ajman Free Zones Authority under licence 56191, is the controller for the personal data described in this notice. That means we decide why and how it is collected and used.

You can reach us about anything in this notice at contact@tilasmi.com, or directly at shirsho@tilasmi.com if you would rather. Both reach the same person. We do not currently name a Data Protection Officer.

What we collect, and where it comes from

We collect personal data in three places on this site.

The booking form. The "Book a call" section on the home page embeds a scheduling tool from Calendly, a third-party provider. When you use it, Calendly collects your name, your email address, and anything else you type into the form, such as a note about what you want to discuss. That data reaches us so we know who is calling and why.

The email links. Two links on the site open your own email application addressed to contact@tilasmi.com. If you send a message, we receive whatever your email contains: your address, your name if you give it, and the content of the message.

Ordinary web traffic. Like any website, tilasmi.com runs on hosting infrastructure that keeps basic technical logs of visits, for example your IP address, the page requested, the time of the request and your browser type. We do not read these logs for marketing. This site runs no analytics, no advertising pixels and no tracking scripts of our own; these logs exist because they are how web servers work, not because we asked for them.

Why we collect it, and on what basis

Booking data exists to schedule the call you asked for and to prepare for it. Our basis is that the processing is necessary to take steps you requested before entering into a working relationship with us, which both UAE PDPL and GDPR recognise as a valid ground on its own, without needing separate consent.

Email correspondence exists to answer the question you sent us. Our basis is our legitimate interest in responding to people who contact us, which is limited to that purpose.

Technical hosting logs exist to keep the site running and secure, for example to notice abuse or diagnose an outage. Our basis is our legitimate interest in the security and reliability of our own systems.

The scheduling widget, and what embedding it means

The booking form on this site is not ours. It is Calendly's product, loaded directly from Calendly's own servers into the page. When you use it, your browser talks to Calendly directly, and Calendly processes your data under its own privacy notice, published at calendly.com/legal/privacy-notice, not this one. We see the booking details you enter, but we do not control how Calendly's systems handle that data internally, what it stores in your browser, or how long Calendly itself keeps it. If you would rather not use the widget, the email links reach us just as well and use no third-party service.

Who we share data with

We do not sell personal data, and we do not share it for advertising. The parties who process it on our behalf, or as part of running the tools above, are: Calendly, for the booking form; Google Workspace, which hosts our email inbox; and our hosting and content-delivery provider, which serves the site's files and keeps the technical logs described above.

How long we keep it

We keep booking and email data for as long as it is relevant to the conversation or engagement it relates to, and hosting logs for whatever short window our provider retains them by default. No schedule exists yet for deleting either on a fixed timetable.

International transfer

Your data does not necessarily stay in the UAE. Calendly and Google Workspace are both US-based services and process data on servers outside the UAE and outside the EU, which means a transfer takes place under both UAE PDPL and GDPR.

Your rights under UAE PDPL

Federal Decree-Law No. 45 of 2021 gives you the right to be told how your data is used, to ask for a copy of it, to ask us to correct it, to ask us to delete it, to object to or restrict certain processing, and to ask that automated decisions about you are reviewed by a person. Write to contact@tilasmi.com to use any of these, and tell us which one you want.

Your rights under GDPR

If you are in the EU or EEA, GDPR gives you the right to access, correct, delete, or port your data, to object to or restrict processing, and to withdraw consent at any point where consent is the basis for it. The same address, contact@tilasmi.com, is where to ask.

How to complain

If you are not satisfied with how we have handled your data, you can complain to us directly first, at contact@tilasmi.com. You can also complain to a regulator. In the UAE, that is the UAE Data Office, the federal body responsible for PDPL complaints, through the channels it publishes on its own site. If you are in the EU or EEA, you can complain to the data protection supervisory authority in the country where you live or work.

Changes to this notice

We will update this page when what we collect or how we use it changes.

This notice sits alongside the legal hub and the cookies notice, which covers cookies and similar technologies separately from what is described here.