Privacy Policy

Metabytes is an AI transformation and engineering company. We help organisations identify where AI can create value and design, build, deploy and improve AI systems.

Our services include:

• AI strategy and transformation;
• AI agents and automation;
• generative AI and large language model solutions;
• AI software and product development;
• AI data and knowledge systems;
• AI platforms and engineering;
• AI governance, security and evaluation; and
• managed AI services, optimisation and support.

Our website also contains editorial content, case studies, resources and free tools.

This Privacy Policy applies to personal data processed by Metabytes in connection with our website, marketing, business development and direct interactions with customers and prospective customers.

It does not necessarily apply where Metabytes processes personal data solely on behalf of one of our customers as part of delivering an AI, software, data or automation project.

Where we process personal data on a customer's instructions, the customer may be the organisation responsible for determining how that data is used. In those circumstances:

• the customer's privacy notice may apply to the individuals concerned;
• Metabytes may act as a processor, service provider or equivalent role under applicable law; and
• our processing will be governed by the relevant customer agreement and data-processing terms.

If you are seeking information about personal data processed by Metabytes on behalf of another organisation, we may need to refer your request to that organisation.

The personal data we collect depends on how you interact with Metabytes. We aim to collect only information that is reasonably necessary for the relevant purpose.

Information you provide directly

You may provide personal data when you complete a contact form, start an AI project enquiry, ask us a question, request a consultation, correspond with us by email, subscribe to communications, use a tool or assessment, provide feedback or enter into a commercial relationship with us.

This information may include:

Identity and business information

• name;
• job title;
• role;
• company or organisation;
• professional profile information.

Contact information

• work email address;
• telephone number, if provided;
• company website;
• business address;
• other contact details.

Project and enquiry information

• the business problem you are trying to solve;
• the workflow you want to improve;
• the business area involved;
• the stage of your AI project;
• project timing;
• systems or data categories involved;
• project objectives;
• operational constraints;
• security or deployment requirements;
• indicative budget information, if requested and voluntarily provided;
• attachments you choose to provide; and
• other information included in your enquiry.

Please do not provide passwords, API keys, access credentials, customer records, confidential personal data or sensitive information unless we have specifically asked you to provide it through an appropriate process.

Communications

We may retain information contained in emails, meeting notes, support requests, feedback and other communications with you.

Information collected when you use our website

When you visit the Metabytes website, certain technical information may be collected automatically by our systems or service providers, including:

• IP address;
• browser type and version;
• device type;
• operating system;
• language settings;
• approximate location derived from technical information;
• pages viewed;
• links clicked;
• referring page or website;
• date and time of access;
• session information;
• technical identifiers;
• error and diagnostic information;
• security logs; and
• information about how the website is used.

We may use cookies and similar technologies in connection with some of this information.

Information processed through free tools

Metabytes may make free tools, assessments and calculators available through the website.

Examples may include:

• AI readiness assessments;
• AI opportunity tools;
• AI ROI calculators;
• model or cost comparison tools;
• password generators;
• QR code generators;
• word and character counters; and
• other business, marketing, development or AI utilities.

The information processed depends on the tool.

Some tools may operate using information entered directly in your browser, while others may send information to Metabytes systems or third-party service providers to generate a result.

Where a tool processes personal data, we may process:

• the information you enter;
• selections you make;
• generated results;
• technical usage information;
• tool performance and error data; and
• optional contact details where you choose to save, email or discuss a result.

You should not enter confidential, sensitive or unnecessary personal data into a free tool unless the tool specifically requires it and the relevant privacy information explains how that data is handled.

Where a tool has materially different privacy implications, we may provide additional privacy information within that tool.

Information from other sources

We may receive business contact information from your employer or organisation, another person who introduces you to us, business partners, public company websites, professional networking platforms, public business directories, event organisers or service providers supporting legitimate business-development activities.

We may combine this information with information we already hold where appropriate and lawful.

Customer, supplier and partner information

If you work for a customer, supplier, contractor, technology provider or business partner, we may process professional information such as your name, company, role, business contact details, commercial correspondence, project responsibilities, meeting records and contractual information.

Unless specifically requested through an appropriate process, please do not submit:

• passwords;
• API keys;
• authentication credentials;
• payment-card details;
• government identification documents;
• private medical information;
• biometric information;
• children's personal data;
• criminal records;
• confidential employee records;
• customer databases;
• proprietary datasets containing personal data; or
• other highly sensitive information.

If a project requires Metabytes to process sensitive or regulated data, this should be handled through the appropriate project, security, contractual and data-protection process rather than through a general website form.

We may use personal data to:

• respond to enquiries and questions;
• review AI project enquiries;
• arrange meetings;
• provide requested information;
• provide and manage services;
• administer customer relationships and contracts;
• operate and improve our website and tools;
• diagnose errors and maintain website performance;
• understand how our content and tools are used;
• improve our services and project-delivery processes;
• develop new tools, content and functionality;
• communicate with business contacts and prospective customers;
• send marketing communications where permitted;
• maintain security and prevent fraud, spam or abuse;
• comply with legal, regulatory, accounting and contractual obligations;
• establish, exercise or defend legal rights; and
• support legitimate corporate transactions.

Where practical, we may use aggregated or de-identified information for analysis rather than identifiable personal data.

The legal basis for processing personal data depends on the context and the law that applies.

Where applicable law requires us to identify a legal basis, we may rely on one or more of the following:

Consent

Where you have given clear consent for a specific purpose, such as certain marketing communications or non-essential cookies.

Contract or requested pre-contractual steps

Where processing is necessary to respond to a service request, discuss a proposed engagement, provide contracted services or administer a customer relationship.

Legitimate business interests

Where permitted by applicable law, for purposes such as operating and improving the website, maintaining security, managing business relationships and responding to business enquiries, provided those interests are not overridden by your rights.

Legal obligations

Where processing is necessary to comply with applicable laws or binding legal requirements.

Other lawful grounds

Applicable data-protection laws may permit processing on additional grounds in particular circumstances.

Metabytes works with artificial intelligence, automation and large language model technologies.

Some Metabytes services, tools or internal processes may use automated systems to assist with tasks such as:

• classifying enquiries;
• organising information;
• retrieving relevant information;
• preparing drafts;
• analysing structured or unstructured content;
• supporting workflow automation;
• generating tool outputs; and
• improving operational efficiency.

Where personal data is processed using AI or automated systems, we aim to use it only for appropriate purposes and to apply controls proportionate to the context.

We do not ask users of the public website to provide unnecessary sensitive information for AI processing.

Where we provide a customer with an AI system that processes personal data on the customer's behalf, responsibility for the underlying data, permitted purposes, access, retention and other privacy requirements will normally be addressed through the relevant customer agreement and project architecture.

If a Metabytes process involves automated decision-making that produces legal or similarly significant effects for an individual, we will apply the rights and safeguards required by applicable law.

Our website may use cookies and similar technologies to operate, secure, measure and improve the site.

Strictly necessary technologies

These may be required for core website operation, security, fraud and abuse prevention, load balancing, session management and saving privacy preferences.

Analytics technologies

Where used, analytics technologies can help us understand page usage, traffic patterns, device types, website journeys, content performance and technical performance.

Where required by applicable law, non-essential analytics technologies will be used only after the required consent has been obtained.

Functional technologies

These may support optional functionality such as remembering preferences, embedded content, enhanced forms or tool functionality.

Advertising or marketing technologies

If Metabytes uses advertising or marketing cookies or pixels, we will provide appropriate notice and choice where required by applicable law.

Managing cookies

Where a cookie preference tool is provided, you can use it to review or change your preferences. You can also manage cookies through your browser settings, although blocking some technologies may affect website functionality.

A separate Cookie Policy may provide additional details about the specific cookies and technologies used on the website.

We may use analytics to understand how the Metabytes website and tools are used.

Analytics may involve processing technical and usage information such as pages visited, referral information, approximate device information, session activity, interaction events and error data.

We aim to avoid sending confidential project descriptions, sensitive form content or unnecessary personal data into general website analytics systems.

We may communicate with business contacts and prospective customers where permitted by applicable law.

Marketing communications may include information about Metabytes services, AI strategy, AI agents and automation, AI engineering, free tools, articles, guides, events and company updates.

Where required, we will obtain consent before sending marketing communications.

You can opt out at any time by using the unsubscribe mechanism included in a marketing communication, where available, or by contacting privacy@metabytes.com.

Opting out of marketing does not prevent us from sending service-related, contractual or administrative communications where these remain necessary.

We may retain a limited suppression record so that we can respect an opt-out request.

We may share personal data where reasonably necessary with:

Service providers

Including providers supporting website hosting, cloud infrastructure, storage, analytics, cybersecurity, CRM, email delivery, scheduling, customer support, AI/model infrastructure, software development, project management and other business operations.

Professional advisers

Including lawyers, accountants, auditors, insurers and consultants.

Authorities

Where required or permitted by law, including courts, regulators, government authorities and law-enforcement bodies.

Corporate transaction parties

Potential or actual buyers, investors, advisers or other parties in connection with a legitimate merger, acquisition, restructuring, financing or sale.

Other parties at your direction

Where you have asked us to share information or otherwise consented to the disclosure.

Where appropriate, service providers process personal data on our behalf or under contractual obligations.

Metabytes is based in the United Arab Emirates and may use technology and service providers operating in other countries.

As a result, personal data may be processed or stored outside the UAE, your country of residence or the country in which the information was originally collected.

Where applicable law imposes requirements on cross-border transfers, we will take appropriate steps designed to protect personal data, which may include contractual safeguards, data-processing agreements, technical controls and other transfer mechanisms recognised by applicable law.

We do not aim to retain personal data indefinitely.

Retention depends on factors such as:

• why the information was collected;
• whether an enquiry becomes a customer relationship;
• the length of a commercial relationship;
• contractual obligations;
• legal, regulatory, tax and accounting requirements;
• security and fraud-prevention needs;
• limitation periods;
• dispute or litigation requirements;
• whether the information remains relevant; and
• whether you have asked us to delete information.

When personal data is no longer reasonably required, we may delete it, securely destroy it or anonymise it.

Backup copies may remain for a limited period as part of normal recovery processes.

We use technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, misuse, alteration, disclosure and destruction.

Depending on the system and context, measures may include:

• access controls;
• authentication;
• encryption;
• secure hosting;
• logging;
• role-based permissions;
• software updates;
• backups;
• vulnerability management; and
• internal security procedures.

No website, network or electronic storage system can be guaranteed to be completely secure.

Your rights depend on the law that applies to you and may be subject to legal exceptions.

Depending on the circumstances, you may have the right to:

• obtain information about whether and how we process your personal data;
• access personal data we hold about you;
• ask us to correct inaccurate, incomplete or outdated personal data;
• request deletion where the applicable requirements are met;
• request restriction, suspension or stopping of certain processing;
• object to particular processing activities, including certain direct-marketing activities;
• withdraw consent where processing is based on consent;
• request a copy of certain personal data in a structured electronic format;
• ask for certain data to be transferred to another organisation where technically feasible;
• object to, or request human review of, certain automated decisions that have legal or similarly significant effects; and
• complain to a competent privacy or data-protection authority.

To make a privacy request, contact:

privacy@metabytes.com

Please include enough information for us to understand:

• who you are;
• the right you want to exercise;
• the information or activity your request relates to; and
• any information reasonably needed to locate the relevant records.

We may need to verify your identity before acting on a request.

We may also ask for additional information if a request is unclear or unusually broad.

We will respond in accordance with the timeframes and requirements imposed by applicable law.

In some circumstances, applicable law may permit or require us to refuse, limit or defer a request. If this happens, we will explain the position where legally permitted.

Metabytes does not intend to use public website interactions to make solely automated decisions about individuals that have legal or similarly significant effects unless this is specifically disclosed and appropriate safeguards are provided.

Some tools or systems may use automated processing to classify information, personalise a result, identify a likely category, route an enquiry, calculate an estimate, recommend a next step or generate content.

These functions are intended to support the relevant workflow and should not be treated as a legally binding or professional determination unless expressly stated otherwise.

Where applicable law provides rights relating to automated decision-making or profiling, you may contact us using the details in this Privacy Policy.

The Metabytes website and services are primarily intended for businesses, professionals and organisations and are not designed for children.

We do not knowingly seek to collect personal data from children through our general website or project-enquiry forms.

If you believe a child has provided personal data to Metabytes inappropriately, contact privacy@metabytes.com so that we can review the matter.

Certain categories of personal data may receive additional legal protection.

Examples can include health information, biometric identifiers, religious or political information, criminal matters and other categories defined as sensitive by applicable law.

We do not ask users to provide sensitive personal data through ordinary website forms unless there is a specific, lawful and clearly explained reason.

Do not include sensitive personal data in an AI project enquiry unless it is necessary and you are authorised to provide it.

If a customer project involves sensitive data, the relevant requirements should be addressed as part of the project's legal, security and technical design.

Metabytes may process personal data as part of customer AI, automation, software or data projects.

Examples may include personal data contained in CRM systems, support systems, internal documents, knowledge bases, communications, operational records or other systems connected to a customer workflow.

In these circumstances:

• the customer is responsible for ensuring it has an appropriate basis to provide or make the data available;
• Metabytes will process the data only for agreed project purposes;
• roles and responsibilities should be documented contractually;
• access should be limited to what is necessary;
• security, retention, deletion and transfer requirements may be defined in project-specific agreements; and
• additional safeguards may apply depending on the data and jurisdiction.

This Privacy Policy does not replace a customer-specific data-processing agreement where one is required.

Project enquiries can contain commercially sensitive information even where it is not personal data.

Please provide only the level of detail needed for us to understand your initial enquiry.

Do not send trade secrets, passwords, credentials, private repositories, confidential customer data, regulated datasets or highly sensitive internal documents through a general website form unless we have agreed an appropriate process.

The Metabytes website may link to websites, tools, platforms or services operated by third parties.

Their privacy practices are controlled by them, not Metabytes.

We encourage you to review the privacy information provided by third parties before providing personal data to them.

If you interact with Metabytes through a social network or external platform, that platform may independently collect and process information about you.

Examples may include LinkedIn, X, Instagram, Facebook or other services we may use.

Your use of those platforms is also governed by their own terms and privacy notices.

Metabytes does not sell personal data as part of its business model.

We do not provide personal data to unrelated third parties in exchange for payment.

Some privacy laws use broader definitions of “sale” or “sharing”, particularly in relation to advertising technologies. If Metabytes later uses technologies that fall within those definitions, this Privacy Policy and the website's privacy controls should be updated accordingly.

We may update this Privacy Policy from time to time to reflect changes in our website, tools, services, technology, business practices or applicable legal requirements.

When we make changes, we will update the Last updated date at the top of the page.

If a change is material, we may provide additional notice where appropriate.

If you have a question about this Privacy Policy, how Metabytes handles personal data or want to exercise a privacy right, contact:

Please use the privacy contact above for privacy and personal-data matters rather than submitting sensitive information through the general AI project form.

If you are concerned about how we have handled personal data, please contact us first so that we can review the issue.

Depending on the law that applies to you, you may also have the right to complain to a competent data-protection authority.

For matters governed by UAE federal data-protection law, this may include the UAE Data Office.

If you are located in another jurisdiction, a local privacy or data-protection authority may also have jurisdiction depending on the circumstances.