Privacy & Cookie Notice

Wijdan AI Research & Development Ltd (“Wijdan AI”, “we”, “us”) is an artificial intelligence research and venture company registered in the Dubai International Financial Centre (DIFC), Dubai, United Arab Emirates. For the personal data described in this notice, we act as the Data Controller.

This notice applies to the website at wijdanai.com — the pages you are reading now and the forms on them.

It does not cover our products, which process different data under their own terms. Where a product handles personal data, it is governed by its own notice, provided with that product. If you would like the notice for a particular product, contact dpo@wijdanai.com.

We collect personal data only when you choose to give it to us. This website has no account system, no login for visitors, and no passive profiling. There are exactly two places where you can submit personal data:

Server logs. Like any website, our hosting provider automatically records technical information when a page is requested — such as IP address, timestamp, requested URL, and browser user-agent. These logs exist for security, abuse prevention and diagnosing faults. We do not use them to build profiles of visitors, and we do not combine them with form submissions.

We do not collect special categories of personal data through this website, and we ask that you do not send them to us through the forms.

To be specific about what this site does not do:

• No analytics of any kind — no Google Analytics, Tag Manager, or equivalent.
• No advertising or conversion pixels, and no remarketing.
• No session recording, heatmaps, or behavioural profiling.
• No social media tracking widgets. Links to our social profiles are plain links; nothing loads until you click one and leave our site.
• No third-party fonts, scripts, or embeds. Fonts are served from our own domain.
• No cookies, localStorage, or other browser storage.

Because we place nothing on your device, there is no cookie banner on this site and no consent to manage. If we ever introduce cookies or analytics, we will update this notice and obtain your consent first where the law requires it.

One exception, for completeness. Our private staff administration area, which is password-protected and not reachable from this website, uses a single strictly-necessary session cookie to keep an authorised staff member logged in. It is never set for public visitors, carries no tracking identifier, and is deleted when the session ends.

Under Article 10 of the DIFC Data Protection Law No. 5 of 2020, we must have a lawful basis for processing your personal data. Ours are:

We do not carry out automated decision-making that produces legal or similarly significant effects on you, and we do not sell personal data.

We do not sell, rent, or trade personal data. We share it only where necessary, and only with:

• Hostinger, our website hosting and email provider, acting as our processor. This website’s database and the notification emails our forms generate are handled on their infrastructure. They act only on our instructions.
• Professional advisers — such as legal or accounting advisers — where genuinely necessary.
• Authorities or regulators, where we are required to disclose by law or to establish, exercise, or defend legal claims.

This website’s data is held on our hosting provider’s infrastructure, which sits outside the DIFC.

Where a destination appears on the DIFC Commissioner’s list of jurisdictions assessed as providing an adequate level of protection, under Article 26(2) of the DIFC Data Protection Law, the transfer proceeds on the basis of that adequacy and needs no additional safeguards. Every European Union and European Economic Area member state is on that list.

Where personal data is transferred to a jurisdiction that is not on that list, we rely on the appropriate safeguards permitted under Article 27 of the DIFC Data Protection Law — typically contractual protections that hold the provider to equivalent standards.

You may request details of the safeguards that apply by writing to dpo@wijdanai.com.

We keep personal data only as long as it serves the purpose it was collected for, or as long as the law requires.

You can ask us to delete your data sooner at any time — see Your rights below.

We apply technical and organisational measures appropriate to the risk, as required by Article 9(1)(j) of the DIFC Data Protection Law. These include serving the entire site over encrypted HTTPS, using parameterised database queries to guard against injection, restricting access to submissions to authorised personnel through a password-protected area, and keeping the site free of third-party scripts that could expose visitor data.

No system is completely secure. If a personal data breach occurs that presents a risk to your rights, we will notify the DIFC Commissioner of Data Protection and, where required, you — in line with Articles 41 and 42.

Under Part 6 of the DIFC Data Protection Law No. 5 of 2020, you have the right to:

To exercise any of these, email dpo@wijdanai.com. We will respond within one month. We may need to verify your identity first, and we will tell you if we need longer for a complex request.

Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.

If you are unhappy with how we have handled your personal data, please tell us first at dpo@wijdanai.com so we have the chance to put it right.

You also have the right to complain directly to the DIFC Commissioner of Data Protection, the independent authority supervising the DIFC Data Protection Law, at difc.com.

We are established in the DIFC, and this notice is written under DIFC law. Some of our visitors are in the European Union, the European Economic Area or the United Kingdom, and depending on the circumstances the EU General Data Protection Regulation (GDPR) or the UK GDPR may also apply to how we handle your personal data.

Where either applies, you have the equivalent rights to those set out in section 10. The DIFC Data Protection Law is closely modelled on the GDPR, so the rights and the way you exercise them are substantially the same — write to dpo@wijdanai.com either way.

In that case you may also lodge a complaint with the data protection supervisory authority in the country where you live or work, or where you believe the issue arose, as an alternative to the DIFC Commissioner of Data Protection.

Where a provider processes personal data on our behalf, we put written data processing terms in place with them requiring that they act only on our instructions and apply appropriate security measures.

This website is intended for a professional audience and is not directed at children. We do not knowingly collect personal data from anyone under 18 through this site. If you believe a child has submitted personal data to us, contact dpo@wijdanai.com and we will delete it.

We will update this notice when our practices change — for example, if we add a new form or introduce any technology that stores data on your device. The version number at the top of this page always reflects the current version. Material changes will be made prominent on the site.

Questions about this notice, or about how we handle your personal data: