LAST UPDATED 14 SEPTEMBER 2026
Privacy policy
This explains what personal data we collect when you contact us, why we hold it, where it is stored, how long we keep it, and what you can ask us to do with it.
1. Who we are
Digital Soule LLC is a free zone limited liability company registered in Sharjah Media City, United Arab Emirates. We are the data controller for the personal data described here.
| Legal name | Digital Soule LLC |
|---|---|
| Licence number | 2648445.01 |
| Registered address | Shams Business Center, Sharjah Media City Free Zone, Al Messaned, Sharjah, United Arab Emirates |
| Privacy contact | babar@thedigitalsoule.com |
2. What this covers
This policy covers personal data we collect through thedigitalsoule.com and its subdomains, the enquiry assistant embedded on our site, email correspondence with us, and meetings booked through our scheduling link.
It does not cover data we process on behalf of a client under a separate services agreement. In those engagements the client is the controller and we act as processor under their instructions.
3. What we collect
When you submit an enquiry
Our enquiry assistant asks for, and we store:
- Your name and your role in the business
- Whether the enquiry is for a business or personal
- Company name and website, if you give one
- Email address and phone number
- Location — city and country
- Approximate team size and number of locations
- The operational problems you describe
- Which services you are interested in
- Urgency, timeline and indicative budget range
- Your preferred contact channel
- Anything you write in your own words in the free-text fields
You choose what to enter. Only name, company, email and phone are required for us to respond.
Automatically
- Technical data needed to serve the site: IP address, browser type, device type, pages visited, referring page
- Cookie data as described in our cookie notice
We do not use advertising trackers and we do not sell data to advertisers.
When you book a meeting
Name, email, the time slot you choose, your time zone, and anything you add in the booking notes.
4. Why we process it, and on what basis
| Purpose | Basis (GDPR) | Basis (UAE PDPL) |
|---|---|---|
| Respond to your enquiry | Steps prior to a contract, at your request | Necessary for a contract or pre-contractual steps |
| Assess whether we can help and prepare an indicative proposal | Legitimate interests — responding accurately to a business enquiry | Legitimate interests of the controller |
| Contact you about your enquiry | Steps prior to a contract | Contract or pre-contractual steps |
| Book and hold a meeting | Steps prior to a contract | Contract or pre-contractual steps |
| Keep records of enquiries and correspondence | Legitimate interests — business records and defence of claims | Legitimate interests |
| Meet accounting, tax and regulatory obligations | Legal obligation | Legal obligation |
We do not use your enquiry data to send you marketing you did not ask for. If we introduce a newsletter or similar, it will be separate and opt-in.
5. Automated processing and AI
We want to be straightforward about this, because our service is built on automation.
What is automated. When you submit an enquiry, our system scores it against fixed criteria — such as urgency, size and stated budget — to help us prioritise. It then uses an AI language model, provided by Anthropic, to draft a written summary of what we think you need and an indicative direction.
What is not automated. No proposal, email or message is ever sent to you without a person at Digital Soule reading it and approving it first. There is no decision about you that is made solely by automated means and that produces a legal or similarly significant effect. A person decides whether and how we respond to you, every time.
What the AI provider receives. The content of your enquiry is sent to Anthropic's API to generate that draft. It is not used to train their models.
If you would prefer we handle your enquiry without AI drafting, email babar@thedigitalsoule.com and we will do it manually.
6. Who we share it with
We do not sell personal data. We share it with service providers who process it on our instructions:
| Provider | Purpose | Where data is held |
|---|---|---|
| Supabase | Primary database | European Union (Frankfurt) |
| n8n | Workflow automation | European Union |
| Typebot | Enquiry assistant | European Union |
| Anthropic | AI drafting of proposal text | United States |
| Zoho | Business email, meeting bookings, document signature | European Union data centre |
| Telegram | Internal notification of new enquiries to our team | International |
| Cloudflare | Website delivery and security | Global edge network |
| Lovable | Internal operations dashboard | European Union / United States |
We may also disclose personal data where we are legally required to, including to UAE regulatory or judicial authorities, or where necessary to establish, exercise or defend legal claims.
7. International transfers
We are established in the United Arab Emirates. Our primary database is hosted in the European Union (Frankfurt), and some providers listed above process data in the United States or on global networks.
Under UAE Federal Decree-Law No. 45 of 2021, cross-border transfer is permitted where the receiving jurisdiction provides adequate protection, or where you consent, or where the transfer is necessary to perform a contract with you. The European Union provides an adequate level of protection. For transfers to providers outside such jurisdictions, we rely on the contractual protections in those providers' data processing terms.
For individuals in the European Economic Area or the United Kingdom: transfers outside your region are made under the providers' Standard Contractual Clauses or equivalent safeguards. If you would like detail on the safeguards applying to a specific provider, email us and we will tell you.
8. How long we keep it
| Data | Retention |
|---|---|
| Enquiry records where no engagement follows | 24 months from last contact |
| Correspondence relating to an active or past engagement | 7 years from the end of the engagement |
| Accounting and tax records | 7 years, as required by UAE law |
| Website technical logs | 12 months |
After these periods we delete the data or irreversibly anonymise it so that it can no longer identify you, keeping only aggregate counts.
9. Your rights
Under the UAE PDPL, and under the GDPR where it applies to you, you have the right to:
- Access — ask what personal data we hold about you and get a copy
- Rectification — have inaccurate data corrected
- Erasure — ask us to delete your data, subject to records we must keep by law
- Restriction — ask us to stop processing while a dispute is resolved
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — where we rely on consent, withdraw it at any time
- Not be subject to solely automated decisions — as set out in section 5, we do not make such decisions
To exercise any of these, email babar@thedigitalsoule.com. We will respond within 30 days. We may ask you to confirm your identity first.
If you are not satisfied with our response, you may complain to the UAE Data Office, or — if you are in the EEA or UK — to your national supervisory authority.
10. Security
We protect personal data with encryption in transit on every service, row-level access controls in our database so records are isolated by account, shared secrets on every internal system-to-system call, access limited to personnel who need it, and logging of automated actions.
No system is perfectly secure. If a breach occurs that is likely to result in risk to you, we will notify you and the relevant authority as required by law.
11. Children
Our services are for businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, email us and we will delete it.
12. Changes
We may update this policy. The date at the top will change. If we make a material change to how we use your data, we will tell you directly where we have your contact details.
13. Contact and governing law
Digital Soule LLC
Shams Business Center, Sharjah Media City Free Zone
Al Messaned, Sharjah, United Arab Emirates
babar@thedigitalsoule.com
This policy is governed by the laws of the Emirate of Sharjah and the applicable federal laws of the United Arab Emirates. The courts of the Emirate of Sharjah have exclusive jurisdiction.