This policy applies to mabuzant.com and all its services. We comply with the UAE Personal Data Protection Law (Federal Decree No. 45 of 2021) and the European General Data Protection Regulation (GDPR).
1. Data controller
Flow Plus, the operator of mabuzant.com, is the controller of the personal data collected through this website.
Contact: ai@mabuzant.com
2. Data we collect
We collect the following data when you interact with the website:
- Full name
- Email address
- Country (optional in some forms)
- Professional background (optional)
- Details of the request or problem sent through the consultation form
- Payment data: processed directly by Stripe and not stored by us
- Technical data: IP address, browser type, and the country inferred from the IP (for currency pricing)
3. Legal basis for processing
We process your data on the basis of:
- Performance of a contract: to deliver paid content and confirm bookings
- Legitimate interest: to improve the service and send the newsletter to subscribers
- Consent: when you join the mailing list; you can unsubscribe at any time
4. How we use your data
- Sending content or payment confirmation by email
- Replying to your inquiries and consultations
- Sending the weekly newsletter (subscribers only)
- Improving the website experience and tailoring currencies
- Complying with legal and tax obligations
5. Sharing data with third parties
We do not sell or rent your data. We share your data only with:
- Stripe: to process payments (based in the United States / Ireland, GDPR compliant)
- Brevo (Sendinblue): to send emails (based in France, GDPR compliant)
- Railway / Cloudflare: to host the website and deliver files
- Government or judicial authorities where there is a legal obligation
6. Data retention
- Booking and payment data: 7 years (tax requirements)
- Newsletter subscription records: until you unsubscribe + 30 days
- Consultation data: one year from the date it was sent
- Cookies: 30 days for technical access cookies
7. Your rights
Under the UAE PDPL and the European GDPR, you have the right to:
- Access the data we hold about you
- Rectification where it is inaccurate
- Erasure ("the right to be forgotten"), subject to legal obligations
- Object to the processing of your data for marketing purposes
- Portability: receive your data in a structured format
- Unsubscribe from the newsletter through the "unsubscribe" link in every email
To exercise any of these rights, contact us at: ai@mabuzant.com
We will reply within 30 days. If you reside in the European Union, you have the right to file a complaint with the data protection authority in your country.
8. Data security
We use the HTTPS protocol, database encryption at rest, and access permission controls. Stripe processes bank card data under the PCI DSS standard; it never reaches our servers.
9. Cookies
We use strictly functional cookies: to store your access status after payment and your night/day mode preference. We do not use cookies for advertising tracking.
10. Data transfers outside the UAE / European Union
Some data is processed on servers in the United States or Europe through the service providers listed in section (5). These providers are bound by GDPR safeguards (standard contractual clauses or the Privacy Shield where applicable).
11. Users under 18
This website is not directed at children under 18. If we learn that a minor's data was collected without the consent of a parent or guardian, we will delete it immediately.
12. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify subscribers by email. The "last updated" date at the top of the page reflects the current version.
13. Contact
For any question about this policy or your personal data: