Notice
P-01
Privacy notice.
The short version: this website sets no cookies and runs no analytics. If you email us, we use what you send to reply and, if we work together, to run the work. We never sell personal data.
- Controller
- Ctrl-Fwd AI Ltd
- Licence
- DIFC Commercial Licence CL14599
- Address
- Level 3, Innovation One, DIFC, Dubai, UAE
- Contact
- hello@ctrlfwd.com
- Law
- DIFC Data Protection Law No. 5 of 2020
- Updated
- 25 October 2026
Who we are
Who is responsible for your data.
Ctrl-Fwd AI Ltd is a private company registered in the Dubai International Financial Centre (DIFC), at Level 3, Innovation One, DIFC, Dubai, UAE. We decide how and why your personal data is used, which makes us the controller under the DIFC Data Protection Law No. 5 of 2020.
For anything about your data, email hello@ctrlfwd.com. We have not appointed a Data Protection Officer, because the law does not require one for the kind of processing we do. Your message reaches the person responsible.
What we collect
What we collect, why, and for how long.
| When | What we collect | Why | Lawful basis | How long |
|---|---|---|---|---|
| Visiting this website | Your IP address, browser and device details, and the pages you request. Our hosting provider records these in its server logs. | To deliver the site and keep it secure. | Legitimate interests: running a working, secure website. | We don't keep these logs ourselves. Our hosting provider keeps them under its standard terms. |
| Emailing us | Your name, email address and whatever you choose to include, such as your company, role and the question you're asking. | To reply, and to discuss and arrange work you ask us about. | Legitimate interests: answering enquiries. Steps you ask us to take before a contract. | Up to two years after our last contact, unless we go on to work together. |
| Working together | Contact details of the people we work with, project correspondence and records, and invoices. | To deliver the work, invoice for it and keep business records. | Performing our contract. Meeting legal obligations, such as keeping accounting records. | For the engagement, then as long as DIFC law requires us to keep business records. |
You don't have to give us any personal data. If you don't, we can't reply to you or work with you. We don't make decisions about people by automated means, and we don't build profiles.
Cookies
No cookies. No tracking.
This website sets no cookies, runs no analytics and loads nothing from other companies' servers: our fonts and images come from our own site. The address link in the footer opens Google Maps, which has its own privacy policy.
If we add analytics, forms or a tool such as Diagnose, we will update this notice first, and ask for your consent where the law requires it.
Who we share it with
Who sees your data.
We share personal data only with the people who help us run the business, and only what they need:
- Our website host, Netlify, which serves this site.
- The email, document and workspace services we use to run the business.
- Our professional advisers, such as accountants and lawyers, when they need it.
- Specialist partners on an engagement, only with your agreement.
- Authorities, where the law requires it.
We never sell personal data, and we don't send marketing emails unless you ask us to.
Transfers
When your data leaves the DIFC.
Some of the services we use are based outside the DIFC, including in the United States. When we send personal data to a country the DIFC Commissioner of Data Protection has not recognised as giving adequate protection, we rely on safeguards the DIFC Data Protection Law allows, such as contractual clauses with the provider. Email us if you'd like to know which safeguard applies or to see a copy.
Your rights
What you can ask us to do.
See it
Ask for a copy of the personal data we hold about you.
Correct it
Ask us to fix anything that's wrong or incomplete.
Delete it
Ask us to erase it, unless the law requires us to keep it.
Limit it
Ask us to restrict how we use it while a question is settled.
Object
Object to processing based on our legitimate interests, and to direct marketing at any time.
Move it
Ask for data you gave us in a common electronic format, to use elsewhere.
Email hello@ctrlfwd.com to use any of these rights. It's free, and we reply within one month. We may ask you to confirm who you are first. Using your rights will never affect how we treat you.
Complaints
If you're not happy.
Please tell us first, and we'll try to put it right. You can also complain to the Commissioner of Data Protection at the DIFC, at commissioner@dp.difc.ae, or seek redress through the DIFC Courts.
Changes
Changes to this notice.
We'll update this page when what we do with personal data changes, and change the date at the top. The history is below.
| Version | Date | Change |
|---|---|---|
| 1.0 | 25 Oct 2026 | First version. |