01
1. Who operates this site
AmanahLabs is a trading name used by an independent individual operator (the “Operator”). AmanahLabs is not presented on this site as an incorporated company, UAE entity, Indonesian PT, Singapore company or other registered legal entity unless that status is separately confirmed in writing.
For privacy questions or requests, contact privacy@amanahlabs.com.
02
2. Data we collect
- —Contact and support enquiries: name, company, work email address, message, and support category where provided.
- —Audit requests: work email address or phone number, and request metadata.
- —Security data: IP address, user-agent information, rate-limit records and Cloudflare Turnstile challenge data.
- —Site measurement: limited aggregate usage and performance information when Cloudflare Web Analytics is enabled.
03
3. Why we use the data
Submitting an enquiry does not create a contract and is not consent to unrelated marketing. We do not add form submitters to a newsletter or telephone, SMS or WhatsApp marketing list merely because they contacted us.
- —To respond to a requested conversation, audit request or support request.
- —To protect the site, forms and users from fraud, abuse and automated attacks.
- —To operate, troubleshoot and improve the website and its performance.
- —To establish, exercise or defend legal claims where necessary.
04
4. Service providers and international processing
The website is hosted and operated through Cloudflare services. Enquiry and support records are stored in Cloudflare Workers and Cloudflare D1; rate-limiting information may be stored in Cloudflare KV; Cloudflare Turnstile helps protect forms from automated abuse. Resend is used to send transactional notifications and acknowledgements when configured.
These providers may process data in jurisdictions other than your location. We use them only for the purposes described here and review their contractual, security and transfer safeguards as part of our service-provider management.
05
5. Retention and security
We keep enquiry, support and audit-request records for 730 days (24 months), after which they are deleted automatically. Security data held alongside them — the IP address and browser user-agent recorded to protect the service from abuse — is erased after 30 days, while the enquiry itself is retained. Rate-limit records are kept only for the length of their limit window. Erasure runs on a daily schedule. A longer period applies only where required by law or by a live dispute.
We use access controls, TLS in transit, infrastructure security controls, data minimisation and operational review. No internet service can guarantee absolute security; please avoid sending secrets, credentials or highly sensitive information through a general website form.
06
6. Your choices and rights
Depending on the law that applies to you, you may have rights to request access, correction, deletion, restriction, objection, portability or information about processing. To make a request, email privacy@amanahlabs.com from the address connected with your enquiry and describe what you need. We may ask for proportionate information to verify the request.
You may also have the right to complain to the data-protection authority that applies to you. Local information for Indonesia and UAE visitors appears below.
07
7. Changes to this notice
We will update this notice when our processing, providers, technology or legal obligations materially change. The date above records the latest version.
08
ملحق الإمارات العربية المتحدة / UAE appendix
للزوار في دولة الإمارات العربية المتحدة، يمكن إرسال طلبات الخصوصية إلى privacy@amanahlabs.com. لا يعرّف هذا الموقع AmanahLabs ككيان مسجل في الإمارات أو في سوق أبوظبي العالمي.
The operator has not represented this site as a UAE mainland or ADGM entity. If a UAE operating entity is established, the applicable privacy appendix will be updated to identify the controller, legal regime and rights process before that status is claimed.