Last updated: 5 November 2026
This policy explains what personal data Monokrome Media (“we”, “us”) collects through this website, why we collect it, who sees it, how long we keep it and what rights you have. We handle personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”).
1. Who we are
Data controller: [LEGAL COMPANY NAME], trade licence no. [LICENCE NUMBER],
[OFFICE ADDRESS], Dubai, United Arab Emirates.
Privacy contact: hello@monokrome.com
2. What we collect and why
| Data | Why we collect it | Basis |
|---|---|---|
| Contact form: name, email, phone or WhatsApp number (optional), the service you choose and your project message | To read your enquiry, reply to you and prepare a quote or proposal | Your consent when you submit the form, and steps you ask us to take before a contract |
| Security check result and technical data sent by the Cloudflare Turnstile spam check | To stop automated spam and abuse of the form | Our legitimate interest in keeping the site and form secure |
| Basic server logs such as IP address, browser type and pages requested, kept by our hosting provider | To deliver the website, keep it secure and fix faults | Our legitimate interest in running a secure website |
| Emails, WhatsApp messages or calls you send us directly | To answer you and deliver any work you commission | Your request, and performing a contract with you |
We do not ask for sensitive personal data (such as health, religion or financial card details) through this website. Please do not include it in your message.
3. Cookies and tracking
This website does not use advertising cookies or analytics tracking. [CONFIRM: remove this sentence and list your tools here if you add analytics, a chat widget or advertising pixels later.] The Cloudflare security check may use small technical identifiers needed to tell people from bots. The site loads fonts from Google Fonts, which means your browser requests files from Google servers, and Google receives your IP address as part of that request.
4. Who we share it with
We never sell your data. We use these service providers to run the website and handle enquiries. They process data on our behalf:
- Cloudflare, Inc.: website hosting, delivery and security, including the Turnstile spam check.
- Resend: email delivery. Contact form submissions are sent to our inbox through this service.
- Google LLC: Google Fonts.
- [ADD YOUR EMAIL INBOX PROVIDER, for example Google Workspace or Microsoft 365, and any CRM service you use.]
We may also disclose data if the law or a competent authority requires it.
5. Transfers outside the UAE
These providers store and process data on servers in other countries, including the United States and other locations where they operate. Where we transfer personal data outside the UAE, we do so only to providers that apply appropriate protection and in line with the PDPL.
6. How long we keep it
We keep contact form enquiries for [PERIOD, for example 24 months] after our last contact with you, and longer only where we need records for an active project, accounting or legal reasons. After that we delete or anonymise them. Server logs are kept by our hosting provider for a short period under its own settings.
7. How we protect it
- Enquiries are delivered by email to a private inbox that only the website owner can open.
- The form sends data over an encrypted (HTTPS) connection to our own server, which checks it before it is emailed to us.
- The access keys that connect the form to our email service are kept as encrypted secrets, not in the website code.
- The website uses a strict security policy and security headers to limit injection and tampering attacks.
- Access to our accounts is protected with two-step verification.
No system is perfectly secure. If a breach affects your data, we will notify you and the UAE Data Office as the law requires.
8. Your rights
Under the PDPL you can ask us, free of charge, to:
- tell you what personal data we hold about you and how we use it;
- correct data that is wrong or complete data that is missing;
- delete your data where we no longer need it or you withdraw your consent;
- restrict or stop how we use your data, or object to its use;
- give you your data in a portable format, or transfer it to another provider where technically possible;
- withdraw your consent at any time. This does not affect anything we did lawfully before you withdrew.
To use any of these rights, email hello@monokrome.com. We will respond within one month. We may need to confirm your identity first.
9. Complaints
If you are unhappy with how we handled your data, please contact us first so we can put it right. You also have the right to complain to the UAE Data Office, the federal authority that oversees data protection.
10. Children
This website is for businesses and adults. We do not knowingly collect personal data from children.
11. Changes to this policy
We may update this policy as our website or the law changes. The date at the top shows the latest version.