1. Data controller
Anemone, Dubai, United Arab Emirates. Contact for any question about your data: contact@anemoneandco.com.
Legal
Privacy policy
Last updated:
This policy explains what personal data Anemone collects on the Site, why, who it is shared with, how long it is kept and how to exercise your rights. It applies in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where it applies, the General Data Protection Regulation (GDPR).
2. Data collected and purposes
| Processing | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, work email, organisation (optional), subject, message, language | Answer your request and handle any business follow-up | Pre-contractual steps and legitimate interest in answering enquiries |
| Newsletter | Email address, language, date and proof of confirmation | Send Anemone news | Consent, collected through double opt-in |
| Bot protection | IP address, technical browser signals | Protect forms against automated submissions | Legitimate interest in securing the Site |
| Audience measurement | Page views, referrer, device type, country, aggregated and anonymous | Understand how the Site is used and improve it | Consent (cookie banner) |
| Technical logs | IP address, date, requested page, browser | Operate and secure the hosting | Legitimate interest |
No automated decision-making or profiling takes place. The Site is not intended for children.
3. Recipients and processors
Your data is intended only for the relevant Anemone teams. It is never sold. It is entrusted to the following technical providers, who act on Anemone’s instructions:
| Provider | Role | Location |
|---|---|---|
| Vercel Inc. | Site hosting, technical logs, audience measurement (Vercel Web Analytics) | United States and global network |
| Resend (Plus Five Five, Inc.) | Sending emails and storing the newsletter subscriber list | United States |
| Cloudflare Inc. | Anti-bot verification of forms (Cloudflare Turnstile) | United States and global network |
4. Transfers outside your country
These providers may process data in the United States. Such transfers are covered by the safeguards required by applicable law, including the European Commission’s standard contractual clauses and, where relevant, the EU-US Data Privacy Framework.
5. Retention periods
- Contact requests: 3 years from the last exchange, then deleted.
- Newsletter: until you unsubscribe. Nothing is added to the list before confirmation: the confirmation link expires after 48 hours.
- Cookie choice: 6 months.
- Audience measurement: aggregated statistics, without identifying visitors.
- Technical logs: according to the host’s policy, for the limited period needed for security.
6. Your rights
You have the right to access, rectify, erase, restrict and port your data and to object to its processing, as well as the right to withdraw your consent at any time, without affecting processing already carried out.
To exercise these rights, write to contact@anemoneandco.com. We reply within one month. Proof of identity may be requested if in doubt.
For the newsletter, every email includes a one-click unsubscribe link. For audience measurement, use the “Manage cookies” link in the footer.
You may lodge a complaint with the competent data-protection authority: the UAE Data Office in the United Arab Emirates, or the authority of your country of residence in the European Union (in France, the CNIL: www.cnil.fr).
7. Security
The Site is served over HTTPS only. Confirmation and unsubscribe links are cryptographically signed. Access to data is limited to the people who need it.
8. Changes
This policy may change. The date of the latest update is shown at the top of the page. In the event of a significant change, the cookie banner will be shown to you again where necessary.