Privacy.

What we collect

When you contact us, we receive your email address, your message, and any other details you choose to share, such as your name, company, or how you heard about us.

If you apply for a role by email, we receive your application and any documents you send. Please avoid sending sensitive personal information that is not needed for your inquiry or application.

Hosting and security services also process technical information, such as IP addresses, browser details, request times, and security signals.

How we use it

We use your information to respond to inquiries, discuss possible work, consider applications, understand website use, and maintain the security and operation of the website.

We process information where necessary to respond to a request or take steps toward an agreement, with your consent where required, or to meet applicable legal obligations. Sending an inquiry does not subscribe you to marketing emails.

The services involved

• Vercel provides hosting and handles website requests.
• Cloudflare Turnstile helps protect the contact form against bots. It processes browser and network signals, including IP addresses. Cloudflare also processes these signals to improve its bot detection, as described in its Turnstile Privacy Addendum.
• Resend delivers contact-form messages to our inbox when direct form delivery is enabled. It processes the message and delivery information.
• Umami Cloud and Vercel Web Analytics help us understand website visits, referring websites, and browser/device information. We do not send contact-form fields to analytics, and we exclude URL queries and fragments.
• Our email provider stores correspondence so we can read and respond to it.

Information may be processed outside the UAE, including in countries where these providers operate. Where required, international transfers must use safeguards permitted by applicable data-protection law.

Cookies and browser storage

We use Umami Cloud and Vercel Web Analytics without advertising cookies. No advertising tracking or session recording is configured. Hosting and security services may use cookies or similar technologies to deliver and protect the website.

How long information is kept

We keep correspondence for as long as it is needed to handle the inquiry or application and any resulting business relationship. The retention period also depends on applicable recordkeeping obligations and the need to resolve disputes.

Service providers apply their own retention periods to technical logs, security signals, and delivery records. Deleting an email from our inbox does not necessarily delete every provider’s record immediately.

Your choices and rights

Depending on the law that applies, you may request access to your personal information, correction, deletion, a copy, or restrictions on its use. Where processing relies on consent, you can withdraw it. Some records may need to be retained to meet legal obligations.

Email info@rifoa.com to make a request or raise a concern. We may need to confirm your identity before sharing or changing personal information. You can also raise a complaint with the relevant data-protection authority.

Client work and future changes

This notice covers the website and initial correspondence. Any handling of personal information within a client project is addressed in the relevant service and data-processing agreements.

If the website or our practices change, we will update this notice and its date.