Privacy Policy

1. Introduction

The Haute Agency FZE ("we," "us," or "the Agency") respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information when you use our website at thehaute.agency and our client platform.

2. Information We Collect

We collect the following types of information:

• Account information: name, email address, and company name provided during account creation or onboarding.
• Project data: documents, deliverables, messages, and files uploaded or shared through the client portal.
• Financial data: invoice details and payment records managed through our platform and integrated accounting systems.
• Usage data: pages visited, features used, and browser type, collected to improve the platform experience.
• Contact form submissions: name, email, company, and message content submitted through our discovery call form.

3. How We Use Your Information

We use your information to:

• Provide and manage our consulting services and client portal access
• Process invoices and track payments
• Communicate about projects, deliverables, and account matters
• Send transactional emails (invoices, project updates, password resets)
• Improve our website and platform functionality
• Comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-Party Services

We use the following third-party services to operate our platform:

• Supabase (EU, Frankfurt) for database hosting and authentication
• Vercel for website hosting
• Resend for transactional email delivery
• QuickBooks Online (Intuit) for invoicing and financial record synchronisation

Each service processes data in accordance with their own privacy policies. We select providers with strong data protection practices and, where possible, EU-based data hosting.

5. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Row-level security policies on our database
• Role-based access controls within the platform
• Secure authentication with hashed passwords
• OAuth 2.0 token-based integration with third-party services

6. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. Project data is retained for the duration of our business relationship plus 2 years. Financial records are retained for 5 years as required by UAE commercial law. You may request deletion of your data at any time, subject to legal retention requirements.

7. Cookies

Our website uses essential cookies required for authentication and platform functionality. We do not use advertising or tracking cookies. No cookie consent banner is required as we only use strictly necessary cookies.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Request a copy of your data in a portable format
• Withdraw consent for optional data processing at any time

To exercise any of these rights, contact us at contact@thehaute.agency

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify active clients of material changes via email. The "last updated" date at the top of this page reflects the most recent revision.

10. Contact

For questions about this privacy policy or your data, contact us at contact@thehaute.agency

The Haute Agency FZE
Business Centre, Sharjah Publishing City Free Zone
Sharjah, UAE
+971 50 104 1334
VAT Registration No.: 104247069800003