Privacy Policy

1. Who We Are

Elfoul (الفل) is a digital engineering agency specializing in high-performance web development, mobile applications (iOS and Android), AI automation workflows, and interactive 3D web applications.

For any privacy inquiries, data requests, or questions regarding our practices, you can contact us directly at hello@elfollagency.site.

2. Data We Collect

We collect only the minimum personal data required to respond to your project requests and deliver secure services:

• Contact & Booking Data: When you submit an inquiry through our Contact or Strategy Consultation booking forms, we collect your full name, email address, phone number (optional on booking form), project requirements, estimated budget bracket, desired launch timeline, and message content.
• Technical & Connection Data: When you visit our website, our web servers process standard request data including your IP address, browser type and version, language preference, and request timestamps for rate limiting and spam defense.
• Bot Protection: We use Cloudflare Turnstile to protect our forms against automated spam and abuse without setting tracking cookies or analyzing personal browsing profiles.
• No Analytics or Tracking Data: We do not use Google Analytics, advertising pixels, marketing trackers, or third-party profiling tools on this website.

3. Why We Use Your Data

Your data is used solely for professional, transparent business purposes:

• To evaluate your technical requirements and respond to your messages.
• To prepare tailored architectural proposals, milestone roadmaps, and accurate project quotes.
• To protect our infrastructure against automated brute force, spam bots, and security threats.
• To execute and administer agreed contracts, billing, and project milestones.

4. Legal Basis for Processing

We process your data under the following legal bases: (a) Performance of pre-contractual steps taken at your explicit request (e.g. preparing an engineering proposal or consultation); (b) Our legitimate business interest in securing our website and responding to prospective clients; and (c) Your affirmative consent when submitting our forms.

5. Who We Share Data With

We never sell, rent, or monetize your personal information. We share data only with essential technical infrastructure providers needed to operate our website:

• Cloud Hosting Infrastructure: Secure edge cloud hosting (Vercel) for server execution and content delivery.
• Bot Verification: Cloudflare Inc. (Turnstile service) strictly for privacy-preserving human verification on form submissions.
• Database / Cache: Upstash Inc. (encrypted Redis) used strictly for temporary IP rate-limiting tokens.
• Legal Requirements: Authorities or law enforcement only if required by a valid legal subpoena or binding court order.

6. Data Retention

Inquiries received through our contact and consultation forms are retained for up to 24 months to support continuous project discussions, scoping history, and client records. After 24 months, or upon your verified deletion request, records are permanently deleted from active systems.

7. Your Rights

You retain full control over your personal information. Under applicable privacy laws, you have:

• The right to request access to the personal data we hold about you.
• The right to request correction of inaccurate, incomplete, or outdated information.
• The right to request deletion of your personal records.
• The right to withdraw your consent or object to the processing of your data.
• To exercise any of these rights, contact our privacy team at hello@elfollagency.site. We process all valid requests promptly and without charge.

8. Cookies & Local Storage

This website does NOT use tracking, profiling, or marketing cookies. We use only strictly essential functional preferences:

• NEXT_LOCALE: An essential first-party cookie storing your selected language preference (en, fr, ar).
• data-theme: An essential browser local storage setting that saves your selected color theme (dark or light mode).

9. Security Measures

We implement industry-standard technical defenses including mandatory HTTPS (TLS 256-bit encryption), a hardened Content Security Policy (CSP), anti-tampering cryptographic form tokens, honeypot filters, input sanitization, and strict IP rate limiting.

10. Children's Privacy

Our digital agency services and website are intended for commercial enterprises and individuals aged 16 and older. We do not knowingly collect personal data from anyone under 16. If we become aware of an unauthorized submission from a minor, we will delete it immediately.

11. International Data Transfers

To ensure high availability and sub-second response times globally, data may transit through edge network servers outside your country of residence. All transfers are protected with end-to-end encryption in compliance with international privacy standards.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect technological, legal, or operational adjustments. Any updates will be published on this page with an updated 'Last updated' date.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: hello@elfollagency.site | Website: https://elfollagency.site