Privacy Policy
Last updated: 9 October 2026
This policy explains what personal data KMAS Labs collects through kmaslabs.ai, why we collect it, who we share it with and the choices you have. We process personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and other laws that apply to us.
Who we are
KMAS Labs is an AI consultancy based in the United Arab Emirates. For any question about this policy or your personal data, email [email protected].
What we collect
We only collect what you choose to send us through the contact form:
- Your name and work email address
- Your organization and organization type, if you provide them
- The service you are interested in and your message
- The language of the page you used
Information collected automatically
To protect the form from spam and abuse, Cloudflare Turnstile checks that a visitor is a person and not a bot. This check uses technical details such as your IP address and browser information. Our hosting provider also keeps short-lived server logs for security.
This website does not use advertising cookies, tracking cookies or analytics tools, and it does not build profiles of visitors.
Why we use your data
We use your details to reply to your enquiry, to discuss the services you asked about, and to keep a record of our correspondence. Our legal basis is your request to be contacted and our legitimate interest in responding to business enquiries. We do not use your data for automated decision making.
Marketing
We do not send marketing or newsletter emails. If we ever do, we will only send them to people who have clearly agreed, and every message will include a simple way to unsubscribe.
Who we share it with
We never sell your personal data. We share it only with service providers that help us run this website and our email, under contracts that require them to protect it:
- Cloudflare, for website hosting, security and email forwarding
- Resend, which delivers contact form messages to our inbox
- Google, which provides our email mailbox
International transfers
Some of these providers process data outside the UAE, including in the United States and the European Union. When that happens we rely on the safeguards the law permits, such as contractual protections and providers with recognised security standards.
How long we keep it
We keep enquiries for up to 24 months after our last contact with you, then delete them, unless we start working together or the law requires us to keep them longer.
How we protect it
The website is served only over encrypted connections (HTTPS). Access to enquiries is limited to the people who need it, and our providers apply industry standard security controls.
Your rights
Subject to the law, you can ask us to:
- Tell you what personal data we hold about you and give you a copy
- Correct data that is inaccurate or incomplete
- Delete your data
- Restrict or stop certain processing
- Move your data to another provider where this applies
Making a request or complaint
To use any of these rights, email [email protected]. We will reply within 30 days. If you are not satisfied with our response, you can complain to the UAE Data Office.
Children
This website is intended for business users. We do not knowingly collect personal data from anyone under 18.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.