Privacy

This policy describes how Neem Up handles personal information in connection with this website. It is written to describe the site as it is actually built, and it is revised when the site changes.

The controller is NEEM GC Management Consultancies - FZCO, Dubai, trading as Neem Up; its details are in the legal notice.

What the forms collect

The site has two forms.

“Your site” on the home page asks only for the address of a website you would like a preview of — nothing about you. We receive that address, the language of the page and the time, and use them to build the preview (Art. 6(1)(f) GDPR).

The contact form in the legal notice asks for:

• Your email address — so we can reply.
• Your message, and anything you choose to put in it.
• The language of the page — automatically, so we reply in your language.

It asks you to tick a box confirming you agree to us holding these details in order to answer you. That consent is the only basis on which we hold them (Art. 6(1)(a) GDPR), and you can withdraw it at any time by writing to us. Both forms also carry a hidden field used to catch automated spam; it is discarded and never stored.

We use what you send for one purpose: to build the preview, reply, and discuss the work. We do not sell it, we do not share it with third parties for marketing, and we do not add you to a mailing list.

How your enquiry reaches us

The forms are received by this website itself. It runs on Cloudflare, Inc. (USA), and the entries are stored on our behalf in a Cloudflare database in Western Europe. Cloudflare notifies us of each entry by email at an inbox with Google (Gmail). Both handle the details to deliver them to us, not for purposes of their own. Transfers to the USA rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the Commission’s standard contractual clauses.

Where your information goes

Neem Up is established in Dubai, United Arab Emirates, and your enquiry is read and answered there. If you write to us from the European Union, your details leave the EEA when they reach us.

The United Arab Emirates is not covered by a European Commission adequacy decision, so it is not treated as offering EEA-equivalent data protection by default. The tick box on the contact form is your explicit consent to that transfer (Art. 49(1)(a) GDPR) — and consent only means anything if you know what it involves. Once your details are with us in Dubai, an EU supervisory authority has no direct enforcement reach over them, and the rights set out below are ones we undertake to honour rather than ones a European regulator can enforce on your behalf. You can withdraw your consent at any time and we will delete what we hold.

What the site itself collects

Nothing beyond the forms. This site sets no cookies, runs no analytics, and loads no fonts, scripts or images from third-party servers — the pages you view are not tracked, profiled or reported to anyone.

The one thing stored on your device is your language choice, once you switch between English and German — kept in your browser’s local storage so the site does not switch language under you on the next visit. It is a single value, it never leaves your browser, and clearing your browsing data removes it.

How long we keep it

We keep your details for as long as we are in contact about your project, and in any case no longer than 24 months after we last hear from you, after which they are deleted — automatically, in the website’s database. Where an enquiry becomes an order, the associated records are kept for the period our tax and commercial obligations require.

Your rights

You may ask us at any time to provide a copy of what we hold about you, correct it, delete it entirely, or restrict how we use it. You may object to our using it at all. You may also ask us to hand back what you gave us in a structured, machine-readable form so you can take it elsewhere. Write to teresa.meinen@gmail.com and we will action the request. If you are in the European Union and you believe we have handled your information improperly, you are also entitled to complain to your national data protection authority.

Hosting

These pages are served by Cloudflare, Inc. (USA), which processes your IP address as far as is technically necessary to deliver the site and protect it from attacks. The basis is our legitimate interest in running the site securely (Art. 6(1)(f) GDPR). We have not switched on logging of individual requests for this site.

Contact

Questions about this policy should go to teresa.meinen@gmail.com.