Privacy policy

Who we are

The controller of your personal data is XEPA International Trading FZ-LLC, a free zone company licensed by the Ras Al Khaimah Economic Zone (RAKEZ), licence 5039201, United Arab Emirates. For any privacy request write to [email protected].

What we collect

We collect only what you choose to give us and what is technically needed to run the site:

• Your brief: name, email, phone (optional), preferred channel, and what you tell us about your business (stage, needs, market, timing, budget range, notes).
• Messages you send us by email.
• Technical data processed by our hosting provider to deliver and protect the site, such as IP address, browser type and request time, kept in short-lived security logs.

We do not use advertising trackers, we do not build profiles and we do not sell personal data.

Why we use it, and on what basis

• To reply to your request and prepare a proposal: steps taken at your request before a contract, and your consent given in the brief.
• To run, secure and fix the site: our legitimate interest in a safe, working service.
• To comply with legal obligations, for example tax and anti-money-laundering rules when you become a client.

How long we keep it

Briefs and emails that do not lead to an engagement are deleted within 12 months of our last contact. If you become a client, we keep what the contract and the law require. Security logs are kept for the shortest time our hosting provider allows.

Who we share it with

Only with providers that help us run XEPA (hosting and network security, email), bound by contract to use the data only on our instructions, and with authorities when the law requires it. Some providers may process data outside the UAE or your country; when that happens we rely on adequate protections such as standard contractual clauses.

Your rights

You can ask to access, correct, delete or receive a copy of your data, to restrict or object to its use, and you can withdraw consent at any time without affecting what was done before. Write to [email protected]; we reply within 30 days. You can also complain to the UAE Data Office or, if you are in the European Union, to your local data protection authority.

Security

The site runs over encrypted connections, loads no third-party scripts or fonts, and the contact form sends nothing until you press send.

Children

Our services are for businesses. We do not knowingly collect data from anyone under 18.

Changes

If this policy changes we update this page and the date above.