Privacy Policy
This policy explains what personal data this website collects, why we use it, how long we keep it and what you can ask us to do with it. It is written to meet UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and the regulations issued under it.
The short version. We collect what you type into the contact form and the standard records our web server keeps. We do not use analytics, advertising or tracking of any kind. We use what you send us to answer you, and for nothing else. You can ask us at any time what we hold about you, have it corrected, or have it deleted. Write to ….
1Who is responsible for your data
The controller of the personal data described here is:
Write to the email address above for anything to do with your personal data. It reaches the person responsible for privacy questions.
2What this policy covers
This policy covers the website at thebrainimage.ae and any enquiry you send through it.
It does not cover the monitoring service itself. Once we install equipment at your site, the data it produces (production readings, alerts, the history of your plant) is handled under the contract you sign with us. That data is about equipment rather than people, but where it can be linked to a named individual, the same rights described in section 9 apply.
3What we collect
3.1 What you send us
If you fill in the contact form, we receive the name, company, role, system size, emirate, phone number, email address and message you enter. Only the name and phone number are required; everything else is there because it helps us give you a useful answer.
If you choose to contact us on WhatsApp instead, we receive your message and the phone number you send it from. That conversation takes place on Meta's service and is also subject to WhatsApp's own privacy policy, which we do not control.
3.2 What the server records automatically
Like any web server, ours keeps a log of the requests it serves. Each entry contains the IP address the request came from, the date and time, the page requested, the response, and the browser and operating system your device reports. These logs exist so that the site can be kept running and so that abuse can be investigated.
3.3 What stays on your device
Two small values are stored in your browser and are never sent to us: the language you chose, and the choice you made on the storage banner. They are described in full in the Cookie Policy.
3.4 What we do not collect
- No analytics. There is no Google Analytics or equivalent on this site.
- No advertising or social media tracking, and no third-party cookies.
- No profiling, and no decisions made about you by automated means.
- No location data, and none of the special categories of data protected under the PDPL: health, religion, race, political opinion, biometric or genetic data.
4Why we use it, and on what basis
| Purpose | Data | Basis in law | Kept for |
|---|---|---|---|
| Answering your enquiry, preparing a quotation, arranging a demonstration | What you entered in the form, or sent by WhatsApp | Your consent, and steps taken at your request before entering into a contract | 24 months after our last contact, unless you become a customer |
| Keeping the website available and investigating abuse | Server logs | Our legitimate interest in the security and availability of the service | 12 months |
| Honouring the choice you made on the storage banner | The choice itself, stored in your browser | Necessary to give effect to your own decision | Until you clear your browser storage |
We do not use your details to send marketing you did not ask for. If we ever want to, we will ask you first and you will be able to say no without it affecting anything else.
5Who else sees it
- Our hosting provider, …, which operates the servers this site runs on and therefore holds the server logs and any message delivered through the site.
- Our email provider, which carries enquiries to the mailbox we read.
- Meta Platforms, if you choose to write to us on WhatsApp.
- Google, because your browser fetches the typeface used on this site from Google Fonts. Google receives your IP address and the standard request headers in order to serve the font file. It happens on every page load and we have no way to see what Google does with it.
- Professional advisers and public authorities, where the law or a lawful order requires it.
We do not sell personal data, we do not rent it, and we do not share it with anyone for advertising.
6Data that leaves the UAE
Our servers are operated by …. Where the recipient of personal data is outside the UAE, we rely on the routes the PDPL allows: transfer to a jurisdiction the UAE recognises as providing adequate protection, appropriate contractual safeguards with the recipient, or your explicit consent for a specific transfer. Tell us if you want to know where a particular piece of your data sits and we will answer.
7How long we keep it
The retention periods are in the table in section 4. When a period ends, the data is deleted or irreversibly anonymised. If you ask us to delete something earlier we will, unless we are required to keep it, for example where it forms part of a commercial record we have to retain under UAE law.
8How we protect it
The site is served over HTTPS, so what you type into the form is encrypted in transit. Access to enquiries is limited to the people who need it to answer you. Accounts are individual, not shared. Data is deleted when its retention period ends rather than kept indefinitely "just in case".
No system is perfect. If a breach occurs that is likely to affect your rights, we will notify the UAE Data Office without undue delay, and you too where required.
9Your rights
Under the PDPL you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct anything that is wrong, or complete anything missing;
- delete what we hold;
- stop or restrict what we are doing with it, or object to a particular use;
- send it to you, or to another controller, in a structured, machine-readable form;
- withdraw your consent, at any time. Withdrawing consent stops future processing; it does not make what was lawfully done before it unlawful.
We make no decisions about you by automated means, so there is nothing to object to on that ground.
To use any of these rights, write to …. It costs nothing. We may need to confirm who you are before we act, and we will reply within the period the law allows.
10Complaints
If something about the way we handle your data is wrong, tell us first. Most things are quicker to fix that way. If you are not satisfied with our answer, you can complain to the UAE Data Office, the federal authority responsible for the PDPL.
If you are established in a free zone that runs its own data protection regime (the DIFC or ADGM, for instance), that free zone's regulator may be the right place to go instead.
11Children
This site is aimed at businesses, installers and property owners. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, write to us and we will delete them.
12Changes to this policy
The date at the top of this page is the date it last changed. If we change something that affects you materially, we will say so on this page rather than change it quietly.