Data & compliance
This page is the plain version of our policies: where your information goes, who touches it, how long we keep it and how to get it back or deleted. The formal wording lives in the Privacy Policy.
Last updated September 2026
- Registered name
- NexPinnacle Global FZ LLC
- Registered address
- Address: Zone -FZ-Al Shuhada' Rd - Al Jazeera AL Hamra Industrial - At RAKEZ Compass Coworking Centre, UAE.
- Data protection contact
- nexpinnacleglobal@gmail.com
- Jurisdiction
- Dubai, United Arab Emirates
Why we hold your data
Every use of your data needs a lawful basis. These are ours, in plain words.
| What we do | On what basis | What that involves |
|---|---|---|
| Name, email, phone, and whatever you write in the message | Your consent, given by ticking the box on the form | Answering an enquiry or estimate request |
| Contact details, site address, drawings, photographs, payment references | Performance of a contract with you | Preparing and delivering a project |
| A one-way hash of your IP address, browser type, pages viewed | Our legitimate interest in preventing abuse of the site | Keeping the website working and safe |
| Name and email | Your separate marketing consent, which you can withdraw at any time | Sending project updates and offers |
What we do
Name, email, phone, and whatever you write in the message
On what basis
Your consent, given by ticking the box on the form
What that involves
Answering an enquiry or estimate request
What we do
Contact details, site address, drawings, photographs, payment references
On what basis
Performance of a contract with you
What that involves
Preparing and delivering a project
What we do
A one-way hash of your IP address, browser type, pages viewed
On what basis
Our legitimate interest in preventing abuse of the site
What that involves
Keeping the website working and safe
What we do
Name and email
On what basis
Your separate marketing consent, which you can withdraw at any time
What that involves
Sending project updates and offers
Where your data is stored
The UAE PDPL asks us to tell you where personal data is processed, including outside the country. Ours is:
| What | Where it is stored | Why |
|---|---|---|
| The database that holds the form you submitted | Enquiry and estimate submissions | Neon Postgres, Frankfurt, Germany (AWS eu-central-1) |
| So the site loads quickly in the UAE | Website pages, images and 3D files | Cloudflare global network, served from the nearest city to you |
| Sending the alert to us and the confirmation to you | Email notifications and replies | Resend, Ireland (AWS eu-west-1) |
| Understanding which pages are useful. Only after you accept analytics cookies. | Website analytics | Google (GA4) and Microsoft (Clarity), global |
What
The database that holds the form you submitted
Where it is stored
Enquiry and estimate submissions
Why
Neon Postgres, Frankfurt, Germany (AWS eu-central-1)
What
So the site loads quickly in the UAE
Where it is stored
Website pages, images and 3D files
Why
Cloudflare global network, served from the nearest city to you
What
Sending the alert to us and the confirmation to you
Where it is stored
Email notifications and replies
Why
Resend, Ireland (AWS eu-west-1)
What
Understanding which pages are useful. Only after you accept analytics cookies.
Where it is stored
Website analytics
Why
Google (GA4) and Microsoft (Clarity), global
Who processes data for us
These are the only companies that handle your personal data on our behalf. Each is bound by its own data-processing terms.
| Company | What they do | Country | What they see |
|---|---|---|---|
| Cloudflare, Inc. | Website hosting, security and content delivery | United States / global edge | IP address at the moment of the request, not stored by us in raw form |
| Neon Inc. | Database hosting | Germany (Frankfurt) | Everything you submit through a form |
| Resend (Plus Five Five, Inc.) | Transactional email | Ireland | Your name and email address, and the content of the confirmation |
| Google LLC | Analytics and advertising measurement | United States / global | Pseudonymous identifiers, only after you accept analytics cookies |
| Microsoft Corporation | Session analytics (Clarity) | United States | Pseudonymous session recordings with text masked, only after consent |
Company
Cloudflare, Inc.
What they do
Website hosting, security and content delivery
Country
United States / global edge
What they see
IP address at the moment of the request, not stored by us in raw form
Company
Neon Inc.
What they do
Database hosting
Country
Germany (Frankfurt)
What they see
Everything you submit through a form
Company
Resend (Plus Five Five, Inc.)
What they do
Transactional email
Country
Ireland
What they see
Your name and email address, and the content of the confirmation
Company
Google LLC
What they do
Analytics and advertising measurement
Country
United States / global
What they see
Pseudonymous identifiers, only after you accept analytics cookies
Company
Microsoft Corporation
What they do
Session analytics (Clarity)
Country
United States
What they see
Pseudonymous session recordings with text masked, only after consent
How long we keep it
| What | How long | Note |
|---|---|---|
| Deleted automatically. You can ask us to delete it sooner. | Enquiries that did not become a project | 24 months from the date you sent it |
| Kept for warranty, accounting and any dispute | Project records for a client we worked with | 5 years after handover |
| Every email carries a one-click unsubscribe | Marketing list | Until you unsubscribe |
| We never store your IP address in a readable form | Hashed IP addresses and security logs | 12 months |
What
Deleted automatically. You can ask us to delete it sooner.
How long
Enquiries that did not become a project
Note
24 months from the date you sent it
What
Kept for warranty, accounting and any dispute
How long
Project records for a client we worked with
Note
5 years after handover
What
Every email carries a one-click unsubscribe
How long
Marketing list
Note
Until you unsubscribe
What
We never store your IP address in a readable form
How long
Hashed IP addresses and security logs
Note
12 months
Photographs, renders and 3D
Images on this site are of two kinds, and each one is labelled. A photograph is of a project we delivered, taken by us or by a photographer we commissioned, and published with the property owner's written permission. Where an owner asked us not to identify their home, the location is given only as a general area.
A visualisation is a render or a generated image of design intent. It shows the standard and the style of work we produce; it is not a photograph of a finished room, and we never present one as though it were.
Materials, furniture and finishes shown in any visualisation are indicative and are confirmed against real samples before anything is ordered.
No stock photograph appears on this site unless it is licensed for commercial use, and no image is reused from another studio's work.
If you believe an image on this site is yours, write to us and we will remove it while we check.
Accessibility
WCAG 2.1 Level AA · Partially conformant — some items outstanding
We build to WCAG 2.1 Level AA. Text contrast, keyboard navigation, focus outlines, form labels and error messages, and reduced-motion support are all in place, and every release is checked automatically against the WCAG 2.1 A and AA rules that a machine can test.
Outstanding: an assessment by a person, covering the criteria no tool can judge — whether headings describe what follows, whether alt text says something useful, and whether the site makes sense read aloud in order. Captions on video content follow once the videos are supplied.
If any part of this site is difficult for you to use, tell us and we will fix it and send you the information another way in the meantime.
The formal statement is on the Accessibility page.
Your rights
Under Federal Decree-Law No. 45 of 2021 you can ask us to do any of the following, free of charge. We answer within 30 days.
- Get a copy of the personal data we hold about you
- Correct anything that is wrong or out of date
- Delete your data, where we are not required to keep it
- Receive your data in a portable, machine-readable file
- Stop us using your data for marketing, at any time
- Withdraw a consent you previously gave
- Object to automated processing, if we ever introduce it
- Complain to the UAE Data Office if you are not satisfied with our answer
How to ask
Write to our data protection contact, or use the contact form and say clearly which right you are exercising. We may ask you to confirm your identity before we act, so that nobody else can request your data.
Make a request
Tell us which right you are exercising and, if you have one, the reference number from your enquiry. We answer within 30 days.