This Privacy Policy explains how [full legal entity name] ("Unify", "we", "us" or "our") collects and uses personal data when you visit our website or submit an enquiry. Our registered address is [registered address].

1. Our role

We act as the data controller for the website and enquiries described in this policy. This means we decide why and how personal data is used for these purposes. This policy covers website data and enquiries; it does not describe personal data processed as part of our shared services for clients.

2. The personal data we collect

When you submit an enquiry, the required fields are your full name, work email address, phone number and company name.

You may also provide your company size, the services you are interested in, how you heard about us and a free-text message. These fields are optional.

We automatically capture the page from which you submit the form, campaign tags in the link (UTM source, medium and campaign) and the referring website. Google reCAPTCHA also processes technical browser information to protect the form against spam and abuse.

We do not ask you to provide payment details, identification documents or sensitive personal information through the enquiry form. Please do not include these in your message.

3. How we collect personal data

We collect information you enter in our enquiry form and technical information captured automatically through the website. Webflow receives the form submission and emails a copy to Unify. The submission is passed through n8n to Pipedrive, where it is recorded as an enquiry for our sales team to follow up.

4. How and why we use personal data

We use enquiry information to respond to your request, follow up about the services you have asked about, and understand which marketing channels generate enquiries. We use technical browser information to protect the form against spam and abuse.

We process the information you submit with your consent to respond to and follow up on your enquiry. You can withdraw your consent by contacting us using the details below. Withdrawal does not affect processing that took place before you withdrew consent.

[Legal to finalise the basis and disclosures for channel attribution, automatic website data collection and spam protection once the implementation is confirmed.]

5. How we share personal data

We use the following providers to operate the website and handle enquiries:

Webflow hosts the website, receives all form fields and emails a copy of the submission to Unify.

n8n receives all form fields in transit to pass the submission to Pipedrive.

Pipedrive stores all form fields as contact, company and lead records for sales follow-up.

Google reCAPTCHA processes technical browser information for spam and abuse protection.

Access to enquiry records in Pipedrive is limited to authorised sales team members and system administrators. We do not sell your personal data or share it with third parties for their own marketing.

We may also disclose personal data where required by applicable law or a binding request from a competent authority.

6. International transfers

[Insert the confirmed countries or regions where website and enquiry data is stored or accessed, and explain the applicable safeguards for transfers outside the UAE.]

7. How long we keep personal data

If your enquiry does not lead to a client relationship, we retain it for [approved period] after [agreed trigger], then delete or anonymise it. If you become a client, relevant information is retained under our client-record arrangements. We may retain information for longer where necessary to meet legal obligations or establish, exercise or defend legal claims.

[Insert the confirmed retention periods or criteria for technical browser data, logs and cookies.]

8. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or loss.

9. Your rights

Subject to applicable law and its conditions, you may request information about our processing and access to your personal data, correction, deletion, restriction of processing, or receipt or transfer of your data. You may also object to processing where the law provides that right, including direct marketing, and withdraw consent where processing is based on consent.

To make a request, contact us using the details below. We may need information to verify your identity. If a legal exception prevents us from fulfilling your request, we will explain the reason where permitted. You may also complain to the competent data protection authority.

10. Cookies and website technologies

The website uses Google reCAPTCHA for spam and abuse protection. We also capture campaign and referral information as described above.

[Insert a description of the cookies and other browser storage actually used at launch, their purposes and durations, and the choices available to visitors. State whether separate analytics or advertising tools are active.]

11. Contact us

For questions about this policy or to exercise your privacy rights, contact us at [confirmed privacy email address].

12. Changes to this policy

We may update this policy. The current version will be published on this page with its last-updated date. Where required, we will provide additional notice or obtain consent before introducing a new use of your personal data.