Privacy
notice.

I

Who this notice is from

This notice is from Opulence Automations, an automation studio operating from Dubai, United Arab Emirates.

It covers opulenceautomations.com and the audit request form on it. It is the only place we describe what happens to the details you send us, so it is written to be read rather than skimmed past.

We decide why and how your details are handled, which makes us the controller of them.

II

What we collect

Only what the audit request form asks for, and only when you choose to send it. If we emailed you first and you never filled in a form, section VI describes what we hold about you instead and where it came from:

• Your name.
• The email address you want a reply at.
• What you tell us your business does.
• Which of the four systems you would automate first.
• The dates and times you suggest for the call, including a second choice if you give one.

Alongside the form, our server records the browser user agent string your device sends, and a one way hash of your IP address. The hash is produced with SHA-256 and a secret value, and it exists so that repeat submissions can be rate limited. We do not store your IP address itself and the hash cannot be turned back into one.

We do not ask for and do not want financial details, identity documents, health information, or anything about a third party. Please do not put any of that in the free text box.

III

Why we collect it

To arrange the call you asked for, to prepare for it so the thirty minutes are worth your time, and to send you the written roadmap afterwards. That is the whole purpose.

The hashed IP address exists for one narrower reason: to stop the form being used to send large volumes of unwanted mail through us.

We do not add you to a mailing list. We do not sell, rent or share your details for anyone else to market to you. If we later want to use your details for something not described here, we will ask you first.

IV

Who else sees it

A small number of service providers process these details on our instructions, and only to run the parts of the service they are responsible for:

• Vercel, which hosts this site and runs the code that receives the form.
• Supabase, which stores the audit request.
• Resend, which delivers the confirmation email to you and the notification email to us.
• Google Fonts, which serves the two typefaces this page uses. Because the font files are requested from Google servers, Google receives the IP address of every visitor to this site, whether or not they submit anything. Removing that dependency is on our list.

These providers operate infrastructure outside the United Arab Emirates, so your details are transferred abroad in the ordinary course of the service working. Each is bound by its own contractual terms to process the data only on our instructions.

Beyond that, nobody. We do not run analytics, advertising pixels, session recording, or any other third party script on this site.

V

How long we keep it

An audit request is kept for 12 months from the day you send it, then deleted. If we end up working together, the details move into the working record for that engagement and are kept for five years.

The hashed IP address is pruned on the same schedule as the request it belongs to. Email delivery logs held by our email provider expire on that provider's own retention schedule, which we do not control.

If you ask us to delete your details sooner, we will, unless we are required to keep something for a legal reason. See section VI.

VI

If we emailed you first

This section is for people we contacted who never contacted us. If an email from us led you here, it explains where we got your details, why we are allowed to hold them, and how to make us stop and delete them. Stopping takes one word and needs no reason.

Where we got your details

Not from you. From one of these:

• Apollo.io, a business-to-business contact directory, which supplied a work email address, job title, company name, city, company size and industry.
• Official UAE licence registers published as open data by the regulators: the Dubai Land Department register of licensed brokerage offices and the Dubai Health Authority Sheryan register of licensed health facilities, both via Dubai Pulse, and the equivalent Abu Dhabi registers. From these we take the business name, licence number and type, licence dates, activity, emirate and any published business phone number.
• The business's own website: a published contact email address, and a short extract of the site's public text used to write a relevant opening line.

We collect business contact details. We do not buy lists, and we exclude addresses at free providers such as Gmail and Outlook.com.

Why we are allowed to hold it

We rely on our legitimate interest in contacting businesses that may want a service we offer. We have written an assessment weighing that interest against yours, and you can ask us for a copy of it.

You have the right to object, and objecting costs you nothing and requires no reason. Reply STOP to any email from us, or write to the address below. We stop immediately and permanently. Your address then stays on a do-not-contact list indefinitely, holding only the address, a reason and a date, which is the only way we can guarantee we never write to you again.

Who else sees it

In addition to the providers named above, outreach uses:

• Apollo.io (United States), the directory we search. We download records from it; we do not upload anything about you to it.
• MillionVerifier (European Union), checks an email address exists before we write to it. Receives the address only.
• Apify (European Union), where used, reads published contact addresses from a business's own website.
• Anthropic (United States), drafts a suggested answer if you reply. Receives the text of your reply.
• Google Workspace (United States and global), sends and receives the email itself.

All of these operate outside the United Arab Emirates, so your details are transferred abroad in the ordinary course of the service working. We do not sell your information and we do not share it for anyone else's marketing.

How long we keep it

• If an address bounces, or we decide not to contact you: 90 days, then deleted.
• If we emailed you and you never replied: 12 months from the last email, then deleted.
• If you replied and a conversation started: 24 months from our last contact, then deleted.
• The text of your reply is deleted 90 days after the conversation is closed.
• Do-not-contact entries are kept indefinitely, deliberately, for the reason given above.

Your rights

You can ask us to tell you everything we hold about you and where it came from, correct anything wrong, delete everything, or simply stop contacting you. Email hello@opulenceautomations.com. We answer within 30 days and there is no charge. If you are not satisfied with how we handle it, you can complain to the UAE Data Office.

Please do not send us confidential data

If you reply to us, please do not include patient records, client lists or anyone else's personal details. We do not need them and we do not want to hold them. If you send them anyway we will delete them and tell you we have.

VII

Your rights

You can ask us to do any of the following with the details you sent:

• Tell you what we hold and give you a copy of it.
• Correct anything that is wrong.
• Delete it.
• Stop using it while a complaint or a correction is being sorted out.
• Send it to you, or to somebody else, in a machine readable file.
• Object to us handling it at all.

Write to hello@opulenceautomations.com and say which one you want. We will reply within 30 days. We will not charge you and we will not ask you to justify the request. We may ask one question to confirm that you are the person who sent the form, because handing your details to somebody pretending to be you would be worse than the alternative.

If you are not satisfied with how we handle it, you can complain to the relevant data protection authority.

VIII

Cookies

This site sets no cookies. It sets no analytics cookies and no advertising cookies, because it runs no analytics and no advertising. There is no consent banner because there is nothing to consent to.

Nothing about you is stored in your browser by this site, and no third party is permitted to store anything there through it. If your browser reports a cookie from this domain, tell us, because that would be a mistake on our side.

IX

Changes

If we change how any of this works, we will change this page and move the date at the top of it. The date at the top is always the date the current version took effect.

If a change is significant, and it affects details you have already sent us, we will email you about it rather than rely on you noticing a new date.

X

Contact

For anything about this notice, or to exercise any of the rights in section VI, write to hello@opulenceautomations.com.

The same address handles anything else, including the audit itself.

A person reads it.