Privacy policy

Effective date: 10 October 2026

1. Who we are

This website and our services are provided by Floux for Web Solutions LLC, trading as Floux, a company registered in the Isle of Man under commercial registration number 000890B and tax registration number C3367542-34, with its registered office (headquarters) at 49G4+X31, Castletown, Isle of Man. Floux also works from offices in Smart Village, Egypt, and Boulevard Plaza, Dubai, United Arab Emirates, and with team members and clients in many other countries ("Floux", "we", "us").

For personal data collected through this website and in running our business, Floux is the data controller. Questions about this policy or your data can be sent to contact@floux.net with the subject "Privacy request".

2. Laws this policy is written for

We work with clients in Egypt, the Gulf, Europe and Canada, so we apply the strictest relevant standard to everyone. This policy is written to meet the data protection law of the Isle of Man, where Floux is registered (the Data Protection (Application of GDPR) Order 2018), the Egyptian Personal Data Protection Law No. 151 of 2020 and its executive regulations, the EU General Data Protection Regulation (GDPR) and UK GDPR, the Saudi Personal Data Protection Law, the UAE Federal Decree-Law No. 45 of 2021, and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

3. Personal data we collect

We collect only what we need:

• Information you give us: your name, email, phone or WhatsApp number, company, website, location, preferred language, budget range and the details of your project, when you fill in a form, email us, message us or speak to us.
• Files you attach to our contact form, such as a company profile, brand guidelines or a presentation (PDF, Word, PowerPoint or images, up to 5 MB each).
• Client and project information: contact details of your team, invoices and payment records, and materials you share for a project, such as text, images, logos and access details for your website, hosting or ad accounts.
• Technical information: IP address, browser, device, pages visited and the referring page, recorded in standard server logs for security and to keep the website working.
• Cookies and similar technologies: see our Cookie Policy. We do not use analytics or advertising cookies without your consent.

4. Why we use it and our legal basis

Where Egyptian, Saudi or UAE law requires consent for a specific use, we ask for it clearly and keep a record.

• To reply to enquiries and prepare quotes: to take steps at your request before a contract, and our legitimate interest in responding to business enquiries.
• To deliver our services and support: to perform our contract with you.
• To invoice, keep accounts and meet tax obligations: legal obligation.
• To keep our website and systems secure and working: legitimate interest.
• To send occasional updates or articles: your consent, which you can withdraw at any time, or, for existing clients where the law allows, our legitimate interest with an easy opt-out.
• To measure and improve our website with analytics, if introduced: your consent.

5. Data we handle on behalf of clients

When we build, maintain or market a website for a client, we may access personal data that belongs to that client, such as their customers' orders, form submissions or newsletter subscribers. In that role the client is the controller and Floux is the processor: we use that data only to perform the agreed work, on the client's instructions, keep it confidential and delete or return it when the work ends. A data processing agreement is available on request.

6. Who we share it with

We never sell personal data. We share it only with trusted providers who help us run our business, under contracts that require them to protect it:

• Website hosting and security: Hostinger, with servers in Europe (the Netherlands and Lithuania).
• Email, file storage and productivity tools used by our team.
• Payment and banking providers, to process invoices and payments.
• Analytics or advertising platforms, only if you have consented.
• Professional advisers such as accountants and lawyers, and authorities when the law requires it.

7. International transfers

Floux is headquartered in the Isle of Man, works from offices in Egypt and the United Arab Emirates, and some of our providers are located elsewhere, including the EU and the United States. When personal data leaves the country where it was collected, we use the safeguards the applicable law requires, such as the European Commission's standard contractual clauses for data from the EU or UK, and the licences, permits or conditions required by the Egyptian Personal Data Protection Center, the Saudi Data and AI Authority (SDAIA) or the UAE Data Office.

8. How long we keep it

• Files attached to the contact form: deleted automatically 30 days after upload.
• Enquiries that do not become a project: up to 24 months, then deleted.
• Client, contract and invoice records: for as long as the business relationship lasts and then for the period required by tax and accounting law, normally 5 years.
• Website backups and server logs: up to 90 days.
• Marketing preferences: until you unsubscribe or withdraw consent.

9. How we protect it

We use encrypted connections (HTTPS), access controls, strong passwords with two-factor authentication on our accounts, regular updates and backups. Access to client systems is limited to the people working on the project and removed when the work ends. If a personal data breach is likely to affect you, we will notify you and the competent authority within the time the law requires.

10. Your rights

Depending on where you live, you can ask us to: confirm whether we hold your data and give you a copy; correct it; delete it; restrict or object to how we use it; receive it in a portable format; and withdraw consent at any time without affecting earlier processing. Email contact@floux.net with the subject "Privacy request". We will reply within 30 days and may ask you to confirm your identity.

You can also complain to a data protection authority: our lead authority, the Isle of Man Information Commissioner, or your local one, such as the Personal Data Protection Center in Egypt, the Saudi Data and AI Authority, the UAE Data Office, the supervisory authority in your EU country or the UK Information Commissioner's Office, or the Office of the Privacy Commissioner of Canada. We would appreciate the chance to resolve your concern first.

11. Children

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us data, contact us and we will delete it.

12. Links to other websites

Our website links to other sites, such as WordPress.org or Google. We are not responsible for their privacy practices, so please read their policies.

13. Changes to this policy

We may update this policy when our services or the law change. The effective date at the top shows the latest version. Significant changes will be highlighted on this page or sent to clients by email.

14. Contact

Floux for Web Solutions LLC, trading as Floux, 49G4+X31, Castletown, Isle of Man (headquarters). Offices: Smart Village, Egypt, and Boulevard Plaza, Dubai, UAE. Email: contact@floux.net. WhatsApp: +20 100 743 6286. For existing projects: support@floux.net.