Privacy notice
This notice covers bidma.ae and the enquiries sent through it.
Who is responsible
BIDMA PROCUREMENT - FZCO is the controller of the personal data you send through this site. You will find our legal name, trade licence number, registered address and contact details in the entity block on this page.
BIDMA PROCUREMENT - FZCO
Trade Licence No. 88803
Dubai Integrated Economic Zones Authority
Dubai Digital Park, Building A2, Dubai Silicon Oasis
Dubai
United Arab Emirates
What we collect
Only what you type into the enquiry form: your name, work email address, company, job title if you give one, telephone number if you give one, the spend band you choose, the categories you name, anything you write in the message field, and which consents you gave. The form also records the page it was sent from and the time it was sent.
Why we use it
To reply to your enquiry, to arrange a call if you asked for one, and, only if you ticked that box, to send you occasional updates. Nothing else. We do not sell your details and we do not share them for anyone else's marketing.
Our legal basis
Your explicit consent, given when you tick the boxes on the form. You can withdraw any consent at any time by writing to info@bidma.ae. Withdrawal does not affect anything done before it.
Who else handles it
- Netlify hosts this site and its edge network, in the United States.
- Resend sends the enquiry email, in the United States.
- Upstash holds a salted hash of the sending IP address to prevent abuse, in its Europe region.
- Google Workspace holds the mailbox the enquiry arrives in, in the United States.
Transfers outside the UAE
All four of those providers sit outside the UAE, so every submission is a cross border transfer. No UAE adequacy decision covers them, so we make the transfer on the basis of your explicit consent under Article 23 of Federal Decree-Law No. 45 of 2021. That is why the consent sentence on the form names the transfer.
How long we keep it
- The email transmission log at Resend: 30 days.
- The abuse prevention hash at Upstash: up to one hour.
- Enquiries in the mailbox that do not become engagements: 24 months from our last contact, then we delete them.
- Enquiries that do become engagements: we keep them under the retention terms of the engagement letter.
Your rights
You have the right to be told what we hold, to access it and to a copy, to portability, to rectification, to erasure, to restriction of processing, to object including to direct marketing, and to withdraw consent. Write to info@bidma.ae and we will answer within 30 days. You may also complain to the UAE Data Office.
No automated decisions
We make no automated decisions about you and we do not profile you.
How we protect it
The site is served over an encrypted connection and sets no cookies. Enquiries travel to us as email and are held in a mailbox with two factor authentication. Access is limited to the people who need it to answer you. We hold no database of enquiries, so there is no store of your details for anyone to reach. If a breach ever affects your data, we will tell you and the UAE Data Office as the law requires.
Changes to this notice
We update this notice when what we do with your data changes. The date below is when it last changed. Where a change materially affects a consent you have given, we will ask you again rather than rely on the old one.
Privacy contact
Write to info@bidma.ae and mark it for the attention of the privacy contact.
This notice was last updated on 26 July 2026.