Privacy notice
This notice explains what personal data Bcube Technology Services LLC collects through this website, why we collect it, how long we keep it, and what you can ask us to do with it.
Last updated 2026-08-06
Who is responsible
Bcube Technology Services LLC is the controller of the personal data described here. We are registered in the United Arab Emirates and our office is at Dubai, United Arab Emirates.
For anything in this notice, including a request to exercise your rights, write to Email us.
What we collect
We collect very little, and nothing at all unless you send it to us or agree to analytics. There is no account to create, no profile, no tracking of you across other websites, and no advertising.
| Data | When | Why |
|---|---|---|
| Name, email address, and optionally company name and budget range | When you submit the enquiry form | To read your enquiry and reply to it |
| The message you write | When you submit the enquiry form | To understand what you are asking for |
| A one-way hash of your IP address, and your browser’s user-agent string | Whenever you submit any form on this site | To detect and block automated abuse of the form. We do not store the IP address itself, only an irreversible HMAC-SHA256 hash of it, which we cannot turn back into an address |
| Name, email, and optionally phone, location and links to your portfolio, LinkedIn or CV | When you apply for a role, or send a speculative application | To consider your application and get back to you |
| Any CV or portfolio file you attach | When you apply for a role | To read your CV. Attached files are stored privately, are never published or linked from this site, and can only be opened by our team, and every time one is opened we record who did it |
| Name, company, work email, and optionally your job title and sector | When you request the company profile document | To send you the document with case studies relevant to your sector, and to follow up |
| Pages viewed, approximate location by country, device and browser type | Only if you accept analytics cookies | To understand which pages are useful |
We do not collect special category data, we do not knowingly collect data from children, and we do not buy personal data from anyone.
Our legal basis
Where the GDPR or UK GDPR applies to you, we rely on the following bases. Where the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies, the equivalent grounds apply.
- Answering your enquiry: necessary to take steps at your request before entering a contract, and our legitimate interest in responding to people who contact us.
- Blocking abuse of the form: our legitimate interest in keeping the site usable and our inbox free of automated spam. We use a hashed IP rather than the address itself specifically to keep this proportionate.
- Considering your application: necessary to take steps at your request before a possible employment contract. We also keep a short internal note of our assessment, on the basis of our legitimate interest in running a fair and consistent process.
- Sending you the company profile: necessary to do the thing you asked us to do, and our legitimate interest in following up on a business enquiry.
- Analytics: your consent, which you give by accepting analytics cookies and can withdraw at any time from the footer of any page.
How long we keep it
We keep personal data only while it still serves the purpose you gave it for, and we review what we hold rather than letting it accumulate. How long that is depends on the relationship rather than on a fixed calendar, so what follows is what decides it.
| Data | What decides how long we keep it |
|---|---|
| Enquiries and any reply we sent | While there is a live or foreseeable conversation, and afterwards for as long as we may need to show what was discussed or agreed |
| Job applications and attached files | For the role applied for, and a reasonable period afterwards in case a similar role opens, or sooner if you ask us to remove them |
| A file uploaded on a form you did not finish sending | Deleted within 24 hours. It is attached to nothing and nobody reads it |
| Company profile requests | Treated as a sales record, on the same basis as an enquiry |
| Security and change logs | While they remain useful for investigating a security or integrity question |
| Your cookie choice | 180 days, then we ask again |
| Analytics data in Google Analytics | Up to 14 months, set in Google Analytics |
If your enquiry becomes a project, the correspondence moves into our normal business records and is kept for as long as we are required to keep commercial records.
You can ask us to delete what we hold about you at any time, and we will unless the law requires us to keep it. See your rights.
Who else sees it
We do not sell personal data, we do not share it for anyone else’s marketing, and we do not disclose it for cross-context behavioural advertising. A small number of providers process data on our instructions so the site can function.
| Provider | What they process | Where |
|---|---|---|
| Our hosting and database provider | Everything stored by the site | data centres operated by our hosting providers (Railway) and Cloudflare, which may be outside the UAE |
| Cloudflare R2 (object storage) | Images published on this site, and CVs attached to job applications | Cloudflare’s storage region for our bucket |
| Our email provider | The enquiry and reply messages we send | Per that provider’s terms |
| Google (Google Analytics) | Analytics events, but only if you consented | United States and other countries where Google operates |
We may also disclose data where we are legally required to, or to establish or defend a legal claim.
International transfers
We are based in the UAE and our providers may hold data in data centres operated by our hosting providers (Railway) and Cloudflare, which may be outside the UAE and elsewhere. Where personal data protected by the GDPR or UK GDPR leaves that jurisdiction, the transfer is covered by an adequacy decision or by Standard Contractual Clauses with the provider concerned. Where the UAE PDPL applies, transfers are made on the grounds it permits.
Your rights
Depending on where you live, you have some or all of the following rights. We will not charge you for exercising them and we will not treat you differently for doing so.
- Access: a copy of the personal data we hold about you.
- Correction: have anything inaccurate fixed.
- Deletion: have it erased, where we have no overriding reason to keep it.
- Restriction and objection: ask us to pause or stop a particular use, including anything based on legitimate interests.
- Portability: receive it in a machine-readable format.
- Withdraw consent: turn analytics off at any time from the footer of any page. This is as easy as turning it on, and takes effect immediately.
- Complain: to your data protection authority. In the UAE this is the UAE Data Office.
Write to Email us and we will respond within 30 days. We may ask you to confirm your identity first, so that we do not disclose your data to someone else.
If you are in California: we have not sold or shared personal information in the preceding twelve months, and we do not process it for cross-context behavioural advertising. The rights above cover the CCPA/CPRA rights to know, delete, correct and opt out.
How we protect it
Security is built into how the site is written, not bolted on afterwards. In practical terms:
- Everything is served over HTTPS, with HSTS.
- IP addresses attached to enquiries are stored only as irreversible hashes.
- Uploaded images are fully re-encoded, which strips embedded camera metadata including any GPS coordinates.
- CVs are stored under random names in private storage, are never reachable from the public site, and are only ever sent to a browser as a download, never rendered in a page.
- Every change to published content is logged, with who made it and what changed.
No system is perfectly secure. If you believe you have found a vulnerability, please tell us at Email us and we will look at it promptly.
Cookies
The site sets two cookies it cannot work without, and analytics cookies only with your permission. The cookie policy lists every one of them by name, purpose and lifetime.
Changes to this notice
If we change how we handle personal data we will update this page and the date at the top. If the change is significant we will make it obvious rather than relying on you to notice.