Legal
Privacy Policy
Last updated:
1. Who we are
This website (suppy.app) is operated by Suppy FZ-LLC ("Suppy", "we", "us"), in5 Tech, Dubai Internet City, Dubai, United Arab Emirates. We are the controller of the personal data described in this policy.
For any privacy question or request, contact us at hello@suppy.app.
2. What this policy covers
This policy covers personal data collected through this website. It does not cover the shopping apps and online stores we build for retailers: for those, the retailer decides how its customers' data is used, and its own privacy policy applies.
3. The data we collect and why
| What | Data | Purpose and legal basis |
|---|---|---|
| Contact form | Name, work email, company, phone number (optional), subject and message | To answer your enquiry and follow up on it — steps taken at your request before a possible contract, and our legitimate interest in responding to business enquiries |
| Demo booking | Name, email, the time you choose and anything you add to the booking | To schedule and hold the demo — steps taken at your request before a possible contract |
| Analytics (only if you accept) | Pages viewed, approximate location, device and browser type, how you arrived, and whether you booked a demo or sent the form | To understand how the website is used and improve it — your consent, which you can withdraw at any time |
| Technical and security data | IP address, browser information and request logs | To deliver the website and protect it against abuse and attacks — our legitimate interest in running a secure website |
| Emails and messages you send us | Whatever you include (by email or WhatsApp) | To reply to you — our legitimate interest in responding to messages |
We do not sell personal data, and we do not use it for automated decision-making.
4. Cookies and similar technologies
Optional cookies are only used if you accept them in the cookie banner. You can change your choice at any time: open cookie settings.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| suppy-analytics-consent | Essential (browser storage) | Remembers your cookie choice | Until you clear it |
| __cf_bm, cf_clearance | Essential (Cloudflare) | Security checks that protect the website from bots and attacks | Up to 30 minutes / as set by Cloudflare |
| _ga, _ga_TB9X65TFV5 | Analytics — only with consent | Google Analytics: distinguishes visits to produce usage statistics | Up to 2 years |
The demo booking calendar is provided by Cal.com and may set its own cookies inside the booking widget, as described in Cal.com's privacy policy.
5. Who we share data with
We use service providers that process data on our behalf, only for the purposes above:
- Cloudflare — website hosting, delivery and security
- Google (Google Analytics) — website statistics, only with your consent
- Cal.com — demo scheduling
- Resend — delivery of contact-form messages to our inbox
- Microsoft (Microsoft 365) — our email
- Meta (WhatsApp) — only if you choose to message us on WhatsApp
We may also disclose data where required by law or to protect our rights.
6. International transfers
Some of these providers process data outside the European Economic Area, including in the United States. Where that happens, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework, as applicable to each provider.
7. How long we keep data
- Enquiries and demo bookings: for as long as needed to handle your request and any resulting business relationship, and no longer than 24 months after our last exchange, then deleted or anonymized.
- Analytics data: kept in Google Analytics for the retention period set in our account: 2 months.
- Security logs: kept by Cloudflare for a short period, as set by Cloudflare.
8. Your rights
Depending on where you live, you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected, or data deleted;
- restrict or object to how we use your data;
- receive your data in a portable format;
- withdraw your consent at any time (for analytics: cookie settings), without affecting earlier processing;
- complain to a data protection authority — for example the CNIL in France, or the authority where you live or work.
To exercise these rights, email hello@suppy.app. We will reply within one month.
9. Security
We use appropriate technical and organizational measures to protect personal data, including encrypted connections (HTTPS) and access restricted to the people who need it.
10. Children
This website is intended for businesses and is not directed at children.
11. Changes to this policy
We may update this policy when our website or the law changes. The date at the top shows the latest version.
12. Contact
Suppy FZ-LLC — hello@suppy.app. See also our Terms of Use.