Privacy Policy

Information you provide: When you submit a request for access, contact us, or interact with our website, we may collect your name, email address, city, country, and any other information you voluntarily provide. We collect this with your consent (GDPR Art. 6(1)(a)) or for performance of a contract (GDPR Art. 6(1)(b)).

Technical data: We automatically collect certain technical information when you visit, including IP address, browser type, device information, pages visited, and date and time of access. We process this based on our legitimate interest (GDPR Art. 6(1)(f)) or with your consent where required.

Cookies: We use cookies as described in our Cookie Policy.

We process personal data only where we have a lawful basis under GDPR Art. 6(1): (a) your consent; (b) performance of a contract or pre-contractual steps; (c) compliance with a legal obligation; (d) protection of vital interests; (e) public interest; or (f) our legitimate interests, provided your interests do not override those interests.

We use your information to: respond to your enquiries; process and manage access requests; improve our website and services; ensure security; comply with legal obligations; and communicate with you. We do not sell or share your personal data with third parties for marketing purposes. We may share data with trusted service providers under strict data processing agreements (GDPR Art. 28).

Where we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards (adequacy decisions, Standard Contractual Clauses, or other approved mechanisms). You may request details by contacting us.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Access request data is typically retained for up to 24 months. When we no longer need your data, we securely delete or anonymise it.

We implement appropriate technical and organisational measures (encryption, access controls, staff training, security assessments) to protect your personal data against unauthorised access, alteration, disclosure, or destruction (GDPR Art. 32). While we strive to protect your data, no method of transmission over the internet is 100% secure.

You have the right to: Access (Art. 15)—obtain confirmation and a copy of your data; Rectification (Art. 16)—correct inaccurate data; Erasure (Art. 17)—request deletion where applicable; Restriction (Art. 18)—limit processing; Portability (Art. 20)—receive your data in a machine-readable format; Object (Art. 21)—object to processing; Withdraw consent at any time; and Lodge a complaint with a supervisory authority.

To exercise these rights, contact us at the address below. We will respond within one month.

This website is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. The "Last updated" date indicates when the policy was last revised. Material changes will be communicated where required by law.

All content on this website is the exclusive property of Boutallion and is protected by copyright. No content may be copied, reproduced, distributed, or used without prior written permission from Boutallion.

For privacy-related enquiries, to exercise your data protection rights, or for any questions about this Privacy Policy, please contact us. We will respond without undue delay and in any event within one month.

Legal Compliance & Version Information

This policy complies with:

• GDPR: EU General Data Protection Regulation (EU) 2016/679
• ePrivacy Directive: Directive 2002/58/EC (as amended by Directive 2009/136/EC)
• PECR: Privacy and Electronic Communications Regulations 2003 (UK)
• UAE Federal Law: Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data
• EU Cookie Directive compliance

Boutallion is committed to transparency and full compliance with all applicable data protection, privacy, and electronic communications regulations.