Privacy Policy

1. Data controller

Craft Software Consulting LLC, Sharjah Media City, Sharjah, UAE (licence 2322252.01), is the controller of the personal data collected on this website. Contact: contact@craftsoftwareconsulting.com.

2. Data we collect

Through our contact form, we collect your name, email address, project description and the budget range you select.

Our hosting provider may also process technical data (such as IP address and browser information) in server logs, for security and operation purposes.

3. Purpose and legal basis

We use this data to respond to your request, prepare an indicative modular plan and, where relevant, follow up commercially. Processing is based on your consent and on pre-contractual measures taken at your request (Art. 6 GDPR), as well as our legitimate interest in responding to prospects.

4. Recipients and processors

Your data is accessed only by Craft Software Consulting and by the following processors acting on our behalf: Resend (email delivery of your message) and Vercel (website hosting). We never sell your data.

5. International transfers

Resend and Vercel are based in the United States, so your data may be processed there. These transfers are governed by appropriate safeguards (Standard Contractual Clauses and the providers' data-processing commitments).

6. Retention

Contact data is kept for the maximum period allowed for commercial prospecting — up to 3 years from your last contact with us — after which it is deleted or anonymised.

7. Your rights

Under the GDPR you may access, rectify, erase, restrict or port your data, and object to its processing. To exercise these rights, email contact@craftsoftwareconsulting.com. You may also lodge a complaint with your local data-protection authority (e.g. the CNIL in France).

8. Cookies

This website currently uses no cookies or tracking technologies. If we add audience-measurement tools in the future, we will update this policy and request your consent beforehand where required.

9. Security

We take reasonable technical and organisational measures to protect your data against loss, misuse or unauthorised access.

10. Updates

We may update this policy. The version in force is the one dated at the top of this page.