Privacy Policy

Last updated: March 2026

The short version: We collect the minimum data we need to deliver the scan you requested. We store it on EU-based servers. We do not sell it. We do not share it with advertisers. You can ask us to delete it at any time.

1. Who we are

This website (foundd.ae) is operated by IQ Middle East LLC-FZ, registered in the Dubai International Financial Centre free zone, UAE.

CompanyIQ Middle East LLC-FZ
Email[email protected]
Websitefoundd.ae

IQ Middle East LLC-FZ is the data controller for all personal data collected through this website.

2. What data we collect

We collect personal data only when you voluntarily provide it through one of the forms on this website.

Scan requests

When you request a free scan, we collect: your name, email address, website URL, and a brief description of your business. We use this information to deliver your scan report and to contact you about the results.

Email correspondence

If you contact us by email (e.g. [email protected]), we retain the content of your message, your email address, and any information you choose to include.

Automatically collected data

Our hosting infrastructure (Hetzner, EU-based servers) may collect standard server logs including IP addresses, browser type, and pages visited. These logs are used solely for security monitoring and are retained for a maximum of 30 days.

3. How we use your data

We use the data we collect to deliver the scan report you requested, to respond to enquiries you send us, to follow up on scan results where you have expressed interest in further help, and to maintain the security and performance of our website. We do not use your data for automated profiling or automated decision-making. We do not sell your data to third parties. We do not share your data with advertisers.

4. Legal basis for processing

For visitors in the European Economic Area (EEA) and the United Kingdom, we process your data under the following legal bases as defined by the GDPR:

Consent: When you submit a form on this website, you consent to the processing of the data you provide for the stated purpose.

Legitimate interest: We have a legitimate interest in responding to scan requests and in maintaining the security of our website.

We also process your data in accordance with DIFC Data Protection Law (DIFC Law No. 5 of 2020).

5. Where your data is stored

Your form submissions are stored in Pipedrive CRM, which processes and stores data on servers located in the European Union. Pipedrive is certified under the EU-U.S. Data Privacy Framework and maintains appropriate safeguards for international data transfers.

Our website is hosted on Hetzner cloud infrastructure on EU-based servers (Falkenstein, Germany), managed through the Coolify platform. Hetzner operates in accordance with GDPR and maintains appropriate technical and organisational security measures.

6. Data retention

We retain your data for as long as necessary to fulfil the purpose for which it was collected:

Scan requests: Retained for up to 24 months from your last interaction. If ongoing services are established, data is retained for the duration of the engagement and any applicable legal retention period.

Server logs: Retained for a maximum of 30 days.

7. Your rights

Depending on your location, you may have the following rights regarding your personal data: the right to access, correction, deletion, restriction of processing, data portability, objection to processing, and the right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

You may also have the right to lodge a complaint with the DIFC Commissioner of Data Protection.

8. Cookies

This website uses a cookie consent mechanism. If you accept cookies, Google Tag Manager may set analytics and advertising measurement cookies. If you decline, no tracking cookies are placed. A single preferences cookie (foundd_cookie_consent) is stored in your browser to remember your choice.

The Pipedrive form integration may set functional cookies necessary for form submission. These are essential to the operation of the form and do not track you across other websites.

9. Third-party services

We use the following third-party services that may process your data:

Pipedrive (CRM, EU servers): Stores form submissions and manages communication.

Hetzner (Hosting, EU servers): Hosts the website and stores server logs.

Google Tag Manager (Analytics): Loaded only after cookie consent is granted. May set analytics and measurement cookies.

Fontshare / Google Fonts: Serves web fonts. May collect anonymised usage data.

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version and effective date are always shown at the top of this page.

11. Contact

Email[email protected]
Subject linePrivacy Query
Response timeWithin 30 days