Privacy Policy

1. Who We Are

Serenade Climate ("we", "us", "our") is a climate advisory firm headquartered in the United Arab Emirates. This Privacy Policy explains how we handle personal data collected via serenadeclimate.com and in the course of our advisory engagements, in accordance with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Data We Collect

• Contact form data: Name, work email address, company name, and the message you submit via our consultation request form.
• Usage data: Anonymised browser information (page views, scroll depth, referral source) collected via analytics tools if enabled. No personally identifiable information is collected without your consent.
• Communications: Emails and messages you send us directly are stored securely for the purpose of responding to and managing your enquiry.

3. How We Use Your Data

• To respond to enquiries: We use your contact details solely to respond to your consultation request or message.
• To improve our services: Anonymised analytics help us understand how visitors use the site and improve content.
• Legal compliance: We may retain records where required by UAE law or regulatory obligations.

4. Legal Basis for Processing

We process your data on the basis of: (a) your consent when you submit the contact form; (b) our legitimate interest in responding to business enquiries; and (c) compliance with legal obligations. You may withdraw consent at any time by contacting us at privacy@serenadeclimate.com.

5. Data Retention

We retain contact enquiry data for a maximum of 24 months, after which it is securely deleted. Anonymised analytics data may be retained for up to 36 months.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We use Web3Forms (web3forms.com) solely to route your contact form submission to our inbox. This service processes your submitted data as a data processor on our behalf. No other third-party services receive your personal data without your explicit consent.

7. Cookies

Our website does not currently set any tracking or advertising cookies. If we introduce analytics cookies in the future, we will update this policy and obtain your prior consent.

8. Your Rights

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your data where no legal retention obligation exists.
• Objection: Object to processing based on legitimate interests.
• Portability: Receive your data in a structured, machine-readable format.

9. Data Security

We implement industry-standard security measures including HTTPS encryption, HTTP security headers (HSTS, CSP, X-Frame-Options), and access controls. No method of electronic transmission is 100% secure, but we take reasonable precautions to protect your data.

10. International Transfers

Our website is hosted via Cloudflare, a US-based company operating under standard contractual clauses for international data transfers. Form submissions are processed via Web3Forms servers. By submitting a form, you consent to this processing.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date will be updated above. We encourage you to review this page periodically.

12. Contact Us

For any privacy-related questions, requests, or complaints, please contact us at: privacy@serenadeclimate.com