Privacy Policy
How we collect, use, and protect your personal data when you visit pyramids.ae or engage with The Ancient Pyramids.
1. Who we are
The Ancient Pyramids ("we", "us", "our") is a UAE-based boutique construction firm specialising in custom majlis and villa annex projects. We operate the website pyramids.ae.
For any question about this policy or the personal data we hold about you, contact us at info@pyramids.ae.
2. What data we collect
Data you give us directly
- Contact details: name, email address, and phone number, submitted through our estimate questionnaire.
- Project preferences: location, majlis size, style, quality tier, timeline, and other selections you make in the questionnaire.
- Free-form notes: anything you write in the "Additional requirements" field.
Data collected automatically
- Device and browser information: IP address (truncated), browser type, device type, screen size.
- Usage patterns: pages visited, time on page, form steps completed, clicks, scroll behaviour.
- Session recordings: anonymised video-like replays of your visit (mouse movements, taps, form interactions) via Microsoft Clarity, to help us diagnose usability issues.
- Referral source: which website, ad, or search result sent you to us.
3. Why we collect it
- To respond to your estimate request and prepare a proposal.
- To arrange site visits and follow-up communication.
- To improve the accuracy of our pricing and the usability of our website.
- To measure and optimise our marketing spend on Google, Meta and other advertising platforms.
- To detect fraudulent submissions and prevent misuse of our systems.
4. Who we share it with
We share limited data with the third-party service providers that make our site work. Each acts as a data processor under strict contractual terms and applicable data-protection law.
| Service | Purpose | Data shared |
|---|---|---|
| Google Sheets | Lead storage | Full submission (name, contact, selections) |
| Gmail / Google Workspace | Sending you the estimate email | Email address, name |
| Render.com | Backend hosting | Full submission during processing (transient) |
| Twilio (WhatsApp) | Internal team alerts | Name, phone, lead type |
| Google Analytics 4 | Anonymous traffic analytics | Device, referrer, event names (no name/email/phone) |
| Google Ads | Conversion tracking, retargeting | Anonymised click IDs + SHA-256 hashes of email & phone for match-rate improvement |
| Meta Pixel | Conversion tracking, retargeting | Anonymised event data + SHA-256 hashes of email & phone for match-rate improvement |
| Snap Pixel | Conversion tracking, retargeting | Anonymised event data + SHA-256 hashes of email & phone for match-rate improvement |
| Microsoft Clarity | Session replay for UX diagnostics | Interaction recording (form inputs unmasked to help recover leads) |
| Netlify | Website hosting & CDN | Standard server logs |
About the "SHA-256 hashes": to help each ad platform accurately match your enquiry to the ad campaign that reached you, we send a mathematically-irreversible one-way hash of your email address and phone number to Google Ads, Meta and Snap. Your raw email and phone are never transmitted to these platforms in a form they can read directly, only the hash, which they compare to hashes of their own user database. This improves the accuracy of our advertising spend without giving the platforms your actual contact details.
We do not sell your data. We do not share it with any party outside the list above unless required by UAE law.
5. Cookies and similar technologies
We use a small number of cookies and browser-storage entries:
- Strictly necessary: language preference, form-progress cache (so a page reload doesn't erase your answers).
- Analytics: Google Analytics 4, Microsoft Clarity. Anonymous identifiers only.
- Advertising: Google Ads and Meta Pixel cookies for conversion measurement and remarketing.
- Failed-submission queue: if our backend cannot receive a form submission at the moment you send it, we temporarily hold the submission in your browser's local storage and retry on your next visit, so your enquiry is not lost.
A first-time visit shows a cookie notice at the bottom of the page. Continuing to use the site after that notice indicates acceptance. You can disable cookies at any time in your browser settings, though some site functions may stop working.
6. How long we keep your data
- Lead records (Google Sheets): indefinitely, so we can respond to a follow-up enquiry years later. You may request deletion at any time.
- Session recordings (Microsoft Clarity): 90 days.
- Analytics data (GA4): 14 months (Google's default retention setting).
- Advertising IDs (Google Ads, Meta Pixel), retention set by those platforms, typically 90 days.
- Backend server logs (Render): 7 days for the free tier.
7. Your rights
Under the UAE Personal Data Protection Law (Federal Decree Law No. 45 of 2021), and equivalent laws where you reside (including the EU GDPR if you visit from the EU/UK), you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data ("right to be forgotten"), subject to any legal retention requirements.
- Object to certain processing (for example, marketing analytics).
- Withdraw consent at any time.
- Lodge a complaint with the UAE Data Office if you feel we have not handled your data correctly.
To exercise any of these rights, email us at info@pyramids.ae with the subject line "Privacy request". We will respond within 30 days.
8. International data transfers
Some of our processors (notably Google, Microsoft, Meta, Twilio) may store data outside the UAE, typically in the EU or the US. These providers are contractually bound to safeguards meeting UAE PDPL and GDPR standards, including Standard Contractual Clauses where relevant.
9. Security
We use HTTPS across the entire site, encrypted API keys for all third-party services, and rate-limiting on our backend to prevent abuse. Access to our lead database is restricted to the founding team. No online service can be guaranteed 100% secure, but we treat your data with the same care we treat our own projects.
10. Children
Our services are for adults arranging construction projects. We do not knowingly collect data from anyone under 18.
11. Changes to this policy
If we materially change how we handle your data, we will update this page and the "Last reviewed" date at the top. For any change that affects rights you have exercised (for example, extending retention beyond the periods above), we will email you directly if you are a past enquirer.
12. Contact
The Ancient Pyramids
Email: info@pyramids.ae
Website: pyramids.ae