Privacy Policy
Last updated: 22 July 2026
1. Who we are
Formenzo (“we”, “us”) helps founders compare UAE free zones and set up their company. The data controller is Formenzo (FZE), licence/approval no. 20232, registered at Sharjah Research, Technology and Innovation Park (SRTI Park), Block C-C01-110, Sharjah, UAE. For any privacy question, contact us at info@formenzo.com, call +971 58 829 3781, or WhatsApp +971 58 829 3781. Our office: 258 Central Plaza, Schon Business Park, Dubai Investment Park 1 (DIP 1), Dubai, UAE.
2. What we collect
- You give us: name, email, WhatsApp/phone, the free zone and package you choose, and messages you send us.
- When you proceed after review (KYC): identity and company documents — passport copy, photo, proof of address, visa/Emirates ID where relevant, and proposed trade names. These are sensitive; we request them only when required for the authority stage, through the secure portal and never through WhatsApp.
- Automatically: your IP address, browser/device type and the page you came from, recorded in our server logs — including a log entry when you submit a lead form or when a page error is reported. If you explicitly accept optional analytics, Google Analytics and, when a reviewed production project is enabled, Microsoft Clarity process public-page usage and interaction data as described in section 8. We do not place advertising trackers.
3. Why we use it (legal basis)
- To show you accurate pricing and prepare your quote — your request / pre-contract steps.
- To file your company application with the relevant free-zone authority — performance of our service contract.
- To message you about your application — legitimate interest and, for marketing, your consent. We never cold-call.
- To meet legal, KYC/AML and record-keeping obligations.
4. Who we share it with
Only as needed to deliver the service: the relevant free-zone authority and government systems; our infrastructure processors: Supabase (database/storage/auth — see section 5) for managing enquiries and sending the emails you request, Microsoft Azure for the AI chat (section 9), and, only after you accept optional analytics, Google Analytics and, when enabled, Microsoft Clarity for public-site usage analysis (section 8). We do not sell your data or share it for third-party advertising. Processors act on our instructions under data-processing terms. If you choose to message us on WhatsApp, your messages are handled by WhatsApp (Meta) under its own privacy policy.
5. Where it’s stored & for how long
Data is stored on managed cloud infrastructure (Supabase — Tokyo region, Asia Pacific). We keep application and KYC records for as long as needed to provide the service and to meet legal/audit obligations, then delete or anonymise them. Server logs (IP address, browser type, page visited) are kept for a short period for security and troubleshooting, then rotated. You can ask us to delete data we are not legally required to keep.
6. Your rights
Under the UAE Personal Data Protection Law (Federal Decree-Law 45/2021) and, where applicable, the GDPR, you can: access your data; correct it; request deletion; object to or restrict processing; withdraw consent; and request portability. Email info@formenzo.com and we will respond within the statutory period.
7. Security
Access to your data is restricted by row-level security and authentication; documents are held in a private storage bucket accessible only to you and our team. The entire site and client portal are served over HTTPS, so everything you send us is encrypted in transit, and documents are encrypted at rest by our storage provider.
8. Cookies & analytics
The client portal stores its Supabase sign-in session in browser storage on the isolated portal.formenzo.com origin so it can refresh your login. It does not use the HttpOnly session-cookie architecture planned for the replacement portal. Signing out clears the browser session; use a private device and sign out when finished. Optional analytics are limited to public marketing pages and are off by default. Before you choose, and whenever you decline, the site loads neither Google Analytics nor Microsoft Clarity. Your choice is stored in this browser as only accepted or declined; Formenzo does not add an identifier or timestamp to that preference.
If you accept, Google Analytics 4 (Google LLC) processes page and device usage for aggregate statistics. Microsoft Clarity (Microsoft Corporation) remains disabled until its production privacy and security review is complete; if enabled, the same choice permits interaction signals such as clicks and scrolling to produce masked usability insights. Analytics storage is granted only after that choice. Advertising storage, ad-user data and ad personalisation remain denied, and we do not use either service for third-party advertising.
You can accept, decline or change the choice through the “Privacy settings” control on public pages. Declining does not affect prices, calculators, forms or portal access. Provider information is available in Google’s Privacy Policy and the Microsoft Privacy Statement.
9. AI chat assistant
Our website chat is powered by an AI model hosted on Microsoft Azure (Azure OpenAI Service). When you use it, the messages you type are sent through our server to Microsoft’s Azure servers to generate a reply. Please don’t put passport numbers, card details or other sensitive information in the chat. Use the secure portal only for sensitive or identity documents; never send them by WhatsApp. Microsoft may retain chat content briefly (up to 30 days) for abuse monitoring under the Azure OpenAI data policy; your chats are not used to train AI models. Chat answers are automated guidance, not professional advice — only the reviewed invoice in your secure portal is binding.
10. Changes
We may update this policy; the “last updated” date will change. Material changes will be highlighted on this page.