This policy explains what information we collect when you visit our website or use our services, how we use it, and your rights regarding that information.
Information we collect
We collect information you provide directly to us:
- Contact form submissions: your name, email address, company name (optional), phone number (optional), and your message (optional).
- Mailing list subscriptions: your email address.
We use a few analytics and advertising tools to understand how our website is used and to measure and improve our own marketing. Some of these set cookies, including a Meta (Facebook) advertising pixel. We do not sell your data, and you can block cookies in your browser at any time. See "Third-party services" below for the full list.
How we use your information
We use the information we collect to:
- Respond to your inquiries and communicate with you about our services.
- Send you updates and newsletters if you subscribe to our mailing list.
- Improve our website and services.
We will never sell, rent, or share your personal information with third parties for their marketing purposes.
How we store your information
Your data is stored securely using Cloudflare's infrastructure, including their D1 database service. Data is encrypted in transit via HTTPS. We retain your information for as long as necessary to provide our services or as required by law.
Email communications
When you submit our contact form, you will receive an automated confirmation email. If you subscribe to our mailing list, you will receive periodic newsletters and updates. You can unsubscribe from our mailing list at any time by clicking the unsubscribe link in any email or by contacting us directly.
Third-party services
We use the following third-party services to operate our website:
- Cloudflare: website hosting, security, and data storage.
- Cloudflare Turnstile: a privacy-respecting CAPTCHA alternative used on our forms to block automated submissions. Turnstile does not use behavioural tracking and does not store cookies for advertising. It evaluates a non-personal challenge token; no personal data is sent to Cloudflare beyond the standard request metadata required to render the widget.
- Resend: email delivery for form confirmations and newsletters.
- Google Analytics (GA4): aggregated traffic and usage measurement, provided by Google. Sets cookies.
- Microsoft Clarity: aggregated usage analytics, including heatmaps and anonymised session replays, that help us improve the site. Provided by Microsoft. Sets cookies.
- Cloudflare Web Analytics: privacy-first, cookieless traffic measurement.
- Meta Pixel (Meta Platforms / Facebook): we use a Meta pixel to measure the performance of our own marketing and to show relevant Creodi ads to people who have visited our site (retargeting). It sets cookies and shares limited event data, such as the pages you view, with Meta. You can manage this through your browser settings and your Meta ad preferences.
Anti-spam measures on our forms
To protect our forms from automated submissions, every contact and newsletter form includes a layered set of anti-spam checks. None of these checks store or share your personal data:
- A honeypot field that is invisible to humans. If it is filled, the submission is silently dropped.
- A timing token that records when the page loaded. Submissions made in under three seconds are treated as automated and dropped.
- Native browser validation that checks required fields and email format before any submission leaves your device.
- Cloudflare Turnstile (described above) as a final challenge layer.
Your rights
You have the right to:
- Request access to the personal data we hold about you.
- Request correction or deletion of your personal data.
- Unsubscribe from our mailing list at any time.
- Withdraw consent for us to process your data.
To exercise any of these rights, contact us at [email protected].
Data protection
We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our website is served over HTTPS, and our data infrastructure is managed by Cloudflare, which maintains industry-standard security certifications.
UAE compliance
We operate in compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and applicable regulations issued by the Telecommunications and Digital Government Regulatory Authority (TDRA).
Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
Contact us
If you have questions about this privacy policy or how we handle your data, contact us at: