Your data.Handled properly.
We collect only what we need to understand your project, send a fixed-price quote, and deliver the work. Nothing is sold, rented or traded.
Who is responsible for your data.
How we handle enquiries.
A “lead” is anyone who contacts us about a project before a contract is signed. This section explains what we collect, where it goes, and how long we keep it.
1. Where leads come from
We receive enquiries through the project quiz on our website, the contact form, direct email, phone or WhatsApp, referral introductions, social media, and in-person meetings. Any details you share through these channels are recorded as a lead record.
2. What we collect about leads
We collect the information you choose to give us so we can scope and price your project: name, email address, phone number, WhatsApp number, business or company name, company registration number, country, preferred currency, project brief, answers to the project quiz, expected budget, desired timeline, and any files or references you upload. We also record the source of the enquiry (for example, a referral link or page you visited) and basic technical data such as IP address, browser type and device type to keep the site secure.
3. Why we collect it
We use this data to reply to your enquiry, prepare a fixed-price quote, suggest the right product, schedule a kick-off call, keep internal notes about your project, and follow up if you asked us to or if we need more detail to quote. Once you become a client, the lead record becomes part of your project file.
4. Where lead data is stored
Lead data is stored in our CRM, which runs on encrypted cloud infrastructure hosted by our infrastructure provider. Data is encrypted in transit and at rest, and access is limited to team members who need it to quote, build or support your project. We do not store payment card details or passwords in the lead record.
5. How we use the CRM
Inside the CRM we track the status of your enquiry (new, qualified, quoted, proposal sent, etc.), assign follow-up tasks, record calls or messages, and set reminders. This helps us respond quickly and avoid losing the details of your project. Automated reminders may be sent by email if you have asked for a quote or have not yet provided information we need to proceed.
6. Retention for leads
If your enquiry does not become a project, we keep your details for up to 24 months so we can answer future questions or reconnect if you come back to us. After that, the record is deleted or anonymised. If you become a client, your lead data is kept as part of the project and billing records for as long as required by UAE commercial and tax rules.
7. Marketing to leads
We only send project updates and occasional studio news to people who have asked to hear from us or who are actively discussing a project with us. Every marketing email includes an unsubscribe link, and you can email hello@xorh.ae at any time to be removed.
What we collect and why.
1. Information you give us
When you contact us, complete the project quiz or engage us for work, we may collect your name, business name, email address, phone number, country, project brief, budget range, timeline and any files or credentials you choose to share with us so we can deliver the project.
2. Information collected automatically
Our website stores your currency preference locally in your browser. We may also collect basic technical and analytics data — IP address, device and browser type, referring page and pages viewed — to keep the site secure and understand how it is used. We do not use advertising trackers.
3. Why we use it (lawful basis)
To respond to enquiries and prepare fixed-price quotes; to perform our contract with you and deliver, launch and support the project; to invoice and keep accounting records; to provide maintenance under a Xorh Care plan; and to comply with legal and regulatory obligations in the United Arab Emirates. We rely on your consent, the performance of a contract, our legitimate business interests and legal obligations, as applicable.
4. Sharing and processors
We never sell your data. We share it only with service providers that help us operate — hosting and cloud infrastructure, email, payment processing, analytics and project management tools — and only to the extent needed. Where a project uses third-party services in your own name (hosting, domains, SaaS, payment gateways), those providers handle data under their own terms. We may also disclose information where required by law or a competent authority.
5. International transfers
We operate from the United Arab Emirates and our providers may process data in other countries. Where data leaves the UAE, we take reasonable steps to ensure it is handled with an equivalent standard of protection.
6. Security
We use access controls, encrypted connections, reputable infrastructure providers and least-privilege access to credentials you share with us. No system is perfectly secure, so we ask clients to rotate any passwords or API keys shared with us once a project is handed over.
7. Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it where we are not required to keep it, object to or restrict certain processing, or withdraw consent. Email hello@xorh.ae and we will respond within 30 days.
8. Children
Our services are for businesses. We do not knowingly collect data from anyone under 18.
9. Changes
We may update this policy as our services change. The version shown here is always current, with the last updated date at the top of the page.
Talk to a human about your data.
Email hello@xorh.ae with “Privacy” in the subject line, or write to XORH VENTURES FZE LLC, BC-889111, 26th Floor, Amber Gem Tower, Sheikh Khalifa Street, Ajman, United Arab Emirates.