Privacy Policy

Controller

Lamena FZE, Office LB19, LB192701WS17 Area 5.92, Jebel Ali Free Zone, Dubai, United Arab Emirates is the data controller responsible for the processing of personal data described in this Privacy Policy.

For privacy-related inquiries and data subject requests, please contact: info@lamena.ae.

Applicable legal framework

This Privacy Policy is prepared in accordance with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (UAE PDPL) and its implementing regulations. Where visitors access this website from the European Union or European Economic Area, the EU General Data Protection Regulation (GDPR) may additionally apply.

Lamena processes personal data lawfully, fairly and transparently, collecting only what is necessary for the stated purposes and retaining it no longer than required.

Personal data we process

• Contact form data: first name, last name, email address, company name, phone number, message content and consent confirmation.
• Technical access data: IP address, browser type and version, device information, page request timestamps and security-related access logs. This data is processed by the hosting provider when the website is accessed.
• Email delivery metadata: information required to route, deliver, monitor and secure the email notification generated when a contact form is submitted.

Purposes and lawful bases

• Responding to website inquiries and preparing potential business relationships — lawful basis: consent given via the contact form, and legitimate interest in managing pre-contractual communication.
• Operating, securing and maintaining the website — lawful basis: legitimate interests of Lamena in providing a functioning and secure online presence.
• Complying with applicable legal, regulatory and contractual obligations — lawful basis: legal obligation under applicable UAE and international law.

Service providers and international transfers

Lamena uses the following processors who may handle personal data on its behalf:

• Vercel Inc. (United States) — website hosting, content delivery and infrastructure. Data may be processed on servers located outside the UAE.
• Resend (Plus Five Five, Inc., United States) — transactional email delivery for contact form notifications. Submission data is transmitted to Resend for email dispatch.

Both providers are certified under the EU-U.S. Data Privacy Framework; where the GDPR applies, transfers to them rely on the European Commission adequacy decision of 10 July 2023. International transfers are also conducted in accordance with the UAE PDPL requirements for cross-border data flows.

Lamena does not sell, rent or share personal data with third parties for their own marketing purposes.

Cookies and tracking

This website does not use advertising or tracking cookies, analytics pixels, behavioural profiling tools, A/B testing platforms, social media tracking plugins, embedded video players or remarketing tags.

The "Open location" button links to Google Maps, which is operated by Google LLC under its own privacy terms. No data is transferred to Google until you actively follow that external link.

Strictly necessary technical data (e.g. server access logs) may be retained by the hosting provider for security and operational purposes.

Retention

Contact form inquiry data is retained only as long as necessary to respond to the inquiry, manage any resulting business relationship and fulfil applicable legal retention obligations. Inquiries with no resulting business relationship are generally reviewed for deletion after 24 months.

Technical server logs are retained in accordance with the policies of the hosting provider and applicable security requirements.

Where specific legal or contractual obligations require longer retention, data will be kept for that period and then securely deleted.

Your rights

Under the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, and where applicable under the EU GDPR, you may have the following rights in relation to your personal data:

• Right to access — obtain confirmation of whether your data is being processed and receive a copy.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your data where the processing is no longer necessary or lawful.
• Right to restriction — request that processing be limited in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format (where technically feasible).
• Right to withdraw consent — withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
• Right to object — object to processing based on legitimate interests.
• Right to lodge a complaint — file a complaint with the UAE Data Office (uaedataoffice.gov.ae) or, for EU residents, with the competent supervisory authority in your country of residence.

To exercise any of these rights, please contact info@lamena.ae. Lamena will respond within the timeframe required by applicable law, and in any case within 30 days of receipt of a verifiable request.

Security

Lamena and its service providers apply appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. These measures include encryption in transit, access controls and regular security reviews.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, Lamena will comply with applicable breach notification obligations under the UAE PDPL and, where applicable, the GDPR.

Updates to this policy

This Privacy Policy may be updated to reflect changes to the website, service providers, processing activities or applicable legal requirements. The current version is always published on this page.

Last updated: 29 September 2026.