Privacy policy

Last updated: {date}

Draft for legal review. Not legal advice.

In short

We collect personal data only when you send us an inquiry: your contact details, your message and any files you attach.
We use it to reply to you and to discuss a possible project. We do not sell it, and we do not send you marketing.
This website uses no advertising or analytics cookies and no third-party trackers. We count page visits without identifying you.
We keep inquiries for {retention period} and then delete or anonymize them.
You can ask to see, correct or delete your data at any time by emailing [email protected].

The rest of this policy gives the detail.

1. Who we are

Senses Innovations LLC (“Senses Innovations”, “we”, “us”) is a Texas limited liability company. We take on projects in Egypt, Saudi Arabia and the United Arab Emirates. We decide how and why the personal data described in this policy is used, which makes us its controller.

Which laws we follow. We handle all the personal data described in this policy to the standard of Egypt’s Personal Data Protection Law (Law No. 151 of 2020). Where the law of the country you live in gives you more protection, we apply that law as well.

Senses Innovations LLC
5900 Balcones Dr. STE 100, Austin, TX 78731, USA
Email: [email protected]

Data protection officer: {name and contact details of the data protection officer}

Egypt: our team in Egypt is our point of contact for Egypt’s Personal Data Protection Centre.

2. What this policy covers

This policy covers:

visits to sensesinnovations.com
inquiries sent through the form on our Contact page
the emails we send in reply to an inquiry
emails you send to us directly about a possible project, which we handle in the same way as an inquiry

It does not cover:

websites we link to, such as LinkedIn, which have their own privacy policies
services we deliver under contract, including the Senses Service Desk, where the contract with our client applies
our staff who sign in to the site’s administration area. A separate notice covers them. The administration area uses a strictly necessary sign-in cookie for staff only.

3. The personal data we collect

When you send an inquiry

Information	Required?	Why we ask for it
Name	Required	To address you
Company	Required	To know which organization the inquiry comes from
Email address	Required	To reply and to send you a confirmation
Phone number	Optional	If you prefer us to call you
Project country	Required	To understand where the plant or site is
Interest (the service you choose)	Required	To pass the inquiry to the right person
Site location	Optional	To assess the site
Message	Required	Your inquiry
Attachments	Optional	Up to 5 files and 25 MB in total, in PDF, DWG, DXF, XLSX, DOCX, ZIP, JPG or PNG format
Date and time of your consent	Recorded automatically	Our record of your consent to this policy
The page you sent the inquiry from, and the campaign tags in the link you followed (UTM source, medium and campaign)	Recorded automatically	To know which pages and links bring inquiries

Information
Name
Required?
Required
Why we ask for it
To address you
Information
Company
Required?
Required
Why we ask for it
To know which organization the inquiry comes from
Information
Email address
Required?
Required
Why we ask for it
To reply and to send you a confirmation
Information
Phone number
Required?
Optional
Why we ask for it
If you prefer us to call you
Information
Project country
Required?
Required
Why we ask for it
To understand where the plant or site is
Information
Interest (the service you choose)
Required?
Required
Why we ask for it
To pass the inquiry to the right person
Information
Site location
Required?
Optional
Why we ask for it
To assess the site
Information
Message
Required?
Required
Why we ask for it
Your inquiry
Information
Attachments
Required?
Optional
Why we ask for it
Up to 5 files and 25 MB in total, in PDF, DWG, DXF, XLSX, DOCX, ZIP, JPG or PNG format
Information
Date and time of your consent
Required?
Recorded automatically
Why we ask for it
Our record of your consent to this policy
Information
The page you sent the inquiry from, and the campaign tags in the link you followed (UTM source, medium and campaign)
Required?
Recorded automatically
Why we ask for it
To know which pages and links bring inquiries

We also keep records about each inquiry: its status, notes added by our staff, and technical records of whether it reached our client records system and our email.

We do not store your IP address with your inquiry.

Please send only what we need to answer you. Do not include health information or other sensitive personal data. Drawings and tender documents can contain the names and contact details of other people, so send them only if you are allowed to share them.

Spam and abuse protection on the form

Bot check. The form uses Cloudflare Turnstile to check that a person, not an automated program, is sending it. To do this, Cloudflare processes technical information about your browser and connection, such as your IP address. Cloudflare’s own privacy policy applies to this processing.
Hidden field. The form contains a field that people cannot see. If it is filled in, we treat the submission as automated. This involves no personal data.
Rate limiting. To limit repeated submissions, we keep a one-way hashed key derived from your connection details for {rate-limit key retention period}. The key cannot be turned back into your IP address.

When you visit the site

Our own visit counts. For each page view we record the page address, the website you came from (the host name only, such as linkedin.com, not the full address) and the time. For clicks on our main buttons we record which button, on which page, and the time. We do not use cookies for this, and we record no IP address and no identifier that could single you out, so we cannot use these records to identify you. Page views are kept only as a daily total for each page address, counted by a request that carries no cookie, and nothing is stored in your browser to count them.
Hosting and security logs. As with any website, our network and security provider (Cloudflare) processes your IP address and browser details to deliver pages and protect the site from attacks. It may keep this information in its logs for a short time under its own terms. Our own server, which we run on hardware rented from Contabo in Germany, keeps no log of visitors’ IP addresses. We do not copy any of these logs into our database.

Cookies and similar technologies

We do not use advertising or analytics cookies, and we allow no third-party trackers on the site. We use only storage that the site needs to work and stay secure:

Session storage in your browser keeps the campaign tags from the link you arrived by, so that they can be added to an inquiry you send during the same visit. It is deleted when you close the browser tab.
Cloudflare security storage. Cloudflare may set a strictly necessary security cookie (for example __cf_bm) when its bot protection is on, and Turnstile may store data in your browser to run its check.

Because this storage is strictly necessary, the site shows no cookie banner.

Do Not Track and Global Privacy Control

We do not track visitors across websites, and we allow no third party to do so on our site. Your browser’s Do Not Track or Global Privacy Control signal therefore has nothing to switch off here, and the site works the same way whether or not you send one.

4. How we use your data and our legal basis

Purpose	Data used	Legal basis
Reply to your inquiry and take the steps you ask for before a contract, such as a proposal or a site survey	Inquiry details and attachments	Your explicit consent, given when you send the form, and the steps needed to enter into a contract at your request
Send you a confirmation email. It does not repeat your message or attachments.	Name and email address	As above
Record and manage the inquiry in our client records system, Zoho Bigin	Name, company, email, phone, project country, interest, site location, message and source page. Attachments stay in our own system.	As above
Protect the form and the site from spam and abuse	Bot-check signals, rate-limit key, hidden field	Our legitimate interest in keeping the site secure, which does not override your rights and freedoms
Understand how the site is used and which pages bring inquiries	Visit counts (no personal data); source page and campaign tags on inquiries	Our legitimate interest in improving the site, which does not override your rights and freedoms
Meet our legal obligations, and establish or defend legal claims	Any of the above, as needed	Legal obligation; establishing or defending legal claims

Purpose
Reply to your inquiry and take the steps you ask for before a contract, such as a proposal or a site survey
Data used
Inquiry details and attachments
Legal basis
Your explicit consent, given when you send the form, and the steps needed to enter into a contract at your request
Purpose
Send you a confirmation email. It does not repeat your message or attachments.
Data used
Name and email address
Legal basis
As above
Purpose
Record and manage the inquiry in our client records system, Zoho Bigin
Data used
Name, company, email, phone, project country, interest, site location, message and source page. Attachments stay in our own system.
Legal basis
As above
Purpose
Protect the form and the site from spam and abuse
Data used
Bot-check signals, rate-limit key, hidden field
Legal basis
Our legitimate interest in keeping the site secure, which does not override your rights and freedoms
Purpose
Understand how the site is used and which pages bring inquiries
Data used
Visit counts (no personal data); source page and campaign tags on inquiries
Legal basis
Our legitimate interest in improving the site, which does not override your rights and freedoms
Purpose
Meet our legal obligations, and establish or defend legal claims
Data used
Any of the above, as needed
Legal basis
Legal obligation; establishing or defending legal claims

We do not:

sell your personal data, or share it for advertising
send marketing emails or newsletters. If we ever want to, we will ask for your separate consent first.
make automated decisions about you, apart from the automated bot check on the form
pass your inquiry to a partner, such as a licensed telecoms operator, without asking you first

Withdrawing consent. You can withdraw your consent at any time by emailing us. This does not affect what we did before you withdrew it. We may then be unable to continue discussing your project, and we may keep a record of your request.

5. Who receives your data

Our staff see your inquiry only if they need it to answer you. This includes our staff in Egypt, and staff working on our projects in Saudi Arabia and the United Arab Emirates. We use the service providers below to run the site and handle inquiries. Each processes personal data for us under contract and only as far as needed.

Provider	What it does for us	Data it handles	Where
Contabo GmbH	Rents us the server on which we run the website, its database and its private file storage. We manage the server ourselves.	All form data, inquiry records and attachments, stored on our server	Germany (European Union)
Zoho Corporation (Bigin)	Client records system (CRM)	Contact, company and inquiry details, including your message. Not attachments.	{Zoho data centre}
Resend	Sends the confirmation email to you and the inquiry notification and weekly report to us	Your name and email address; inquiry details in the notification to us	{Resend region}
Cloudflare, Inc.	Domain name system, network security, the bot check, the secure connection between visitors and our server, and storage of our encrypted backups	IP address and browser signals; all site traffic in transit; encrypted backups of our database and files	Global network. Backups are stored in the European Union.
{email hosting provider}	Hosts the mailbox that receives inquiry notifications	Inquiry details	{email hosting location}
Anthropic (Claude)	AI assistant our staff may use, through a secure connection to the site’s administration area, to read and manage inquiries and content	Inquiry details, when staff use it for an inquiry	{Anthropic region}

Provider
Contabo GmbH
What it does for us
Rents us the server on which we run the website, its database and its private file storage. We manage the server ourselves.
Data it handles
All form data, inquiry records and attachments, stored on our server
Where
Germany (European Union)
Provider
Zoho Corporation (Bigin)
What it does for us
Client records system (CRM)
Data it handles
Contact, company and inquiry details, including your message. Not attachments.
Where
{Zoho data centre}
Provider
Resend
What it does for us
Sends the confirmation email to you and the inquiry notification and weekly report to us
Data it handles
Your name and email address; inquiry details in the notification to us
Where
{Resend region}
Provider
Cloudflare, Inc.
What it does for us
Domain name system, network security, the bot check, the secure connection between visitors and our server, and storage of our encrypted backups
Data it handles
IP address and browser signals; all site traffic in transit; encrypted backups of our database and files
Where
Global network. Backups are stored in the European Union.
Provider
{email hosting provider}
What it does for us
Hosts the mailbox that receives inquiry notifications
Data it handles
Inquiry details
Where
{email hosting location}
Provider
Anthropic (Claude)
What it does for us
AI assistant our staff may use, through a secure connection to the site’s administration area, to read and manage inquiries and content
Data it handles
Inquiry details, when staff use it for an inquiry
Where
{Anthropic region}

We may also share personal data:

with our professional advisers, such as lawyers and auditors, who are bound by confidentiality
with authorities, courts or regulators where the law requires it
with a buyer or successor if our business is reorganized or sold, who must then protect it as this policy describes

6. International transfers

We are a US company, and we take on projects in Egypt, Saudi Arabia and the United Arab Emirates. Our providers operate mainly in the United States and the European Union. Your data may therefore be transferred to, stored in and accessed from countries other than your own. These include the United States and Germany, and the countries where our staff work: Egypt, Saudi Arabia and the United Arab Emirates. These countries may not offer the same level of protection as yours.

We protect these transfers through:

contracts with each provider that require it to protect the data and use it only on our instructions
storing inquiry records and attachments in the European Union
for data covered by Egypt’s law, the licence or permit that the Personal Data Protection Centre requires for transfers outside Egypt
for data from Saudi Arabia or the United Arab Emirates, any transfer conditions set by those countries’ data protection laws
your explicit consent, given when you send the form, which covers these transfers

7. How long we keep your data

Data	How long
Inquiry records	{retention period}. Then we delete or anonymize them. If the inquiry leads to a contract, we keep what the contract and the law require.
Attachments	{attachments retention period}
Records in Zoho Bigin	{Zoho Bigin retention period}
Notification and confirmation emails	{email retention period}
Rate-limit keys	{rate-limit key retention period}
Visit counts	{visit counts retention period}. These contain no personal data.
Backups	Deleted data can remain in our encrypted backups for up to 12 months, until those backups are deleted.

Data
Inquiry records
How long
{retention period}. Then we delete or anonymize them. If the inquiry leads to a contract, we keep what the contract and the law require.
Data
Attachments
How long
{attachments retention period}
Data
Records in Zoho Bigin
How long
{Zoho Bigin retention period}
Data
Notification and confirmation emails
How long
{email retention period}
Data
Rate-limit keys
How long
{rate-limit key retention period}
Data
Visit counts
How long
{visit counts retention period}. These contain no personal data.
Data
Backups
How long
Deleted data can remain in our encrypted backups for up to 12 months, until those backups are deleted.

8. How we protect your data

Encrypted connections (HTTPS) to the site and between our systems.
The database sits on a private network inside our server. Only the website’s own code can reach it, never a browser. Backups are encrypted before they leave the server.
Attachments are kept in private storage on our server. Only signed-in staff with the right role can open them.
Staff sign in with multi-factor authentication.
Every change made in the administration area is recorded in an audit log.
Access is limited to staff who need it.

No system is completely secure. If a breach of your personal data puts you at risk, we will tell you and the relevant authorities as the law requires.

9. Your rights

Egypt’s Personal Data Protection Law (Law No. 151 of 2020), the standard we apply to all the data in this policy, gives you the right to:

know what personal data we hold about you, and get a copy
withdraw your consent to our use of it
ask us to correct, update, complete or delete it
ask us to limit how we use it
be told of any breach of your personal data
object to our use of it where that use conflicts with your fundamental rights and freedoms

We will respond to these requests wherever you live. You may have similar rights under the law of the country where you live:

Saudi Arabia or the United Arab Emirates: under Saudi Arabia’s Personal Data Protection Law or the UAE’s Federal Decree-Law No. 45 of 2021.
A US state with a privacy law: rights such as access, correction, deletion and a copy of your data.

How to make a request. Email [email protected]. We may ask you to confirm your identity, for example by replying from the email address you used for your inquiry. We will reply within 6 working days of receiving your request. We do not charge for requests.

If you are not satisfied. Please tell us first, so that we can try to put it right. You can also complain to:

Egypt’s Personal Data Protection Centre
in Saudi Arabia or the United Arab Emirates, the data protection authority there
the data protection authority where you live, or, in the United States, your state attorney general (for Texas residents, the Office of the Texas Attorney General)

10. Notice for US visitors

We do not sell personal data, and we do not use it for targeted advertising.
We do not collect sensitive personal data on purpose, and we never sell it.
How we respond to Do Not Track and Global Privacy Control signals is explained in section 3.
How to review and correct your data is explained in section 9. How we tell you about changes to this policy is explained in section 12.

11. Children

This website is for businesses. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.

12. Changes to this policy

When we change this policy, we post the new version on this page with a new “Last updated” date. If a change materially affects how we use data you have already sent us, we will tell you by email before it takes effect.

13. Contact us

For any question about this policy or your personal data:

Senses Innovations LLC
5900 Balcones Dr. STE 100, Austin, TX 78731, USA
[email protected]

Questions about this policy?

Send your question with the inquiry form, and say which section it is about.

Send an inquiry

We reply within one working day.