Privacy Policy
Last updated: 23 July 2026
This policy explains what personal data Latent Digital Solutions collects through this website, why we collect it, and the rights you have over it. We have written it to meet both the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, the PDPL) and the EU and UK General Data Protection Regulation (GDPR), because the two share the same core principles of lawful, consent-based processing and enforceable data subject rights.
1. Who we are
Latent Digital Solutions is the data controller responsible for the personal data described in this policy.
- Latent Digital Solutions, Building A1, Dubai Digital Park, Dubai, United Arab Emirates
- Data protection contact: chinmay@latentdigitalsolutions.com
2. What this website collects
This website has no sign-up and no user accounts. We do not profile visitors and we do not sell or share data with advertisers. The table below is the complete list of what we collect.
| What | Why | Kept for |
|---|---|---|
| Theme preference (light or dark), stored in your browser | To remember how you prefer to read the site | Until you clear your browser storage. It never leaves your device. |
| Server logs: IP address, browser type, page requested, timestamp | Security, abuse prevention, and keeping the site available | Retained by our hosting provider on a short rolling basis |
| Booking details you enter on Calendly: name, email, chosen time, anything you type in the notes | To schedule and prepare for the call you requested | See section 7 |
| Contact form: name, work email, phone if you provide it, and what you tell us you're trying to solve | To respond to your enquiry | See section 7 |
| Anything you send us by phone, WhatsApp, or email | To respond to you | See section 7 |
3. Cookies
The only thing stored in your browser without asking is your theme preference, which is a strictly necessary interface setting exempt from consent requirements under both regimes.
If this site runs analytics, it is Google Analytics, and it is off by default. A banner asks for your consent before any analytics cookie is set or any analytics request is sent. Declining, or simply not responding, keeps analytics off. We use Google's Consent Mode, and IP addresses are truncated even where you do accept. We set no advertising or profiling cookies, and nothing is used to track you across other websites.
4. Lawful basis for processing
- Consent. When you voluntarily book a call or send us a message, you are asking us to contact you. You can withdraw that consent at any time.
- Legitimate interests, and the equivalent lawful processing grounds under the PDPL. Keeping the site secure and available, and preventing abuse.
- Contract. Where you become a client, to negotiate and deliver the agreed work.
- Legal obligation. Where UAE law requires us to retain records.
5. Who else processes your data
We keep the list of third parties deliberately short. Each is used for a single, stated purpose.
- Hostinger hosts and serves this website. It processes connection data including your IP address in order to deliver pages and keep the site available and secure.
- Calendly handles call scheduling. If you book a call, the details you enter go to Calendly under its own privacy policy. If you would rather not use it, call or email us instead using the details in the footer.
- Google Analytics only runs if you accept the cookie banner in section 3. If you do, Google processes anonymised usage data on our behalf to help us understand how the site is used.
- WhatsApp (Meta) and LinkedIn are only involved if you choose to click through to them. We do not embed their tracking scripts on this site.
- Our CRM and business email. Once you contact us, your details are recorded in our customer relationship management system and in our business email so that we can follow up, prepare for the call, and manage the relationship if it becomes one. Where those systems run on infrastructure operated by a hosting provider, that provider processes the data on our behalf under contract.
We can name the specific providers behind each of these at the time you ask. Email us using the address in section 1 and we will tell you.
We do not sell personal data, and we do not disclose it to third parties for their own marketing.
6. Calls, recordings, and transcripts
We do not record every call. Some discovery and project calls are recorded, or automatically transcribed and summarised, so that we have an accurate record of what was discussed and agreed.
Where we intend to record or transcribe a call, we will tell you at the start and ask for your agreement first. You are free to decline. If you decline, the call goes ahead without being recorded, and it will not affect the advice, proposal, or work you receive from us. If you agree and later change your mind, tell us and we will delete the recording.
Recordings, transcripts, and any AI generated summaries drawn from them are personal data. Every right listed in section 9 applies to them, including the right to ask for a copy or ask us to delete them.
7. How long we keep things
| What | How long |
|---|---|
| An enquiry that does not lead to work | 24 months from our last contact with you, then deleted |
| Call recordings, transcripts, and summaries | 12 months, or sooner if you ask us to delete them |
| Records relating to a client engagement | For the engagement, then for as long as UAE law requires us to retain business records |
| Server logs | A short rolling window set by our hosting provider |
These are our default periods, not the maximum we are entitled to keep. If you would like your data deleted sooner, ask us, and we will do it unless a legal obligation requires us to keep it for longer.
8. International transfers
Some of the providers above process data outside the UAE. Where that happens, we rely on the transfer mechanisms permitted under the PDPL and, for data covered by the GDPR, on an adequacy decision or on standard contractual clauses with the provider. You can ask us which mechanism applies to a specific provider.
9. Your rights
The PDPL and the GDPR give you substantially the same rights. You may ask us to:
- confirm whether we hold personal data about you, and give you a copy (access)
- correct data that is inaccurate or incomplete (rectification)
- delete your data where there is no continuing lawful reason to keep it (erasure)
- restrict how we use it while a concern is being resolved (restriction)
- provide it in a portable, machine readable format (portability)
- stop processing based on legitimate interests (objection)
- withdraw consent at any time, without affecting processing already carried out
To exercise any of these, email chinmay@latentdigitalsolutions.com. We will respond within 30 days. There is no charge for a reasonable request.
10. Security
The site is served only over HTTPS with HTTP Strict Transport Security enforced, and sends a restrictive Content Security Policy and related protective headers. We host no visitor database, which materially limits what could be exposed. For client engagements we work under NDA, apply role based access to any client systems we touch, and follow OWASP guidance in the software we build.
11. Children
This site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 18.
12. Changes to this policy
If we change how we handle personal data, we will update this page and revise the date at the top. Material changes will be highlighted here.
13. Complaints
If you are not satisfied with our response, you can complain to the UAE Data Office, and if you are in the EU or UK, to your national data protection supervisory authority. We would appreciate the chance to resolve it with you first.