01Who is responsible

The person responsible for the processing described here (the “data processing officer” in the words of the law, the controller in everyday terms) is ADAA, a commercial establishment registered on 22 August 2026 in the special Commercial Register of the Court of First Instance in Saida under No. 48/5014565 C.R., whose registered address is Center Hamdan, DT Saida, Lebanon.

For anything concerning your personal data, write to tech@adaa-lb.com. That address reaches the people who handle enquiries directly.

02The law we follow

We process personal data in accordance with Lebanese Law No. 81 of 10 October 2018 on Electronic Transactions and Personal Data (the “Data Protection Law”), in particular Part III, Section V of that law on the protection of personal data, and with the general rules of the Lebanese Code of Obligations and Contracts of 1932. The Ministry of Economy and Trade receives the permits and issues the licences the Data Protection Law provides for.

The processing described in this policy falls within the cases that Article 94 of the Data Protection Law exempts from the Ministry’s prior permit: the handling of client and customer data by a business within the limits and needs of its lawful activity, and processing to which the person concerned has agreed in advance. If we ever start a processing outside those cases, we notify the Ministry of Economy and Trade first, as Article 95 requires, and we obtain a licence before any processing that Article 97 makes subject to one.

If you contact us from outside Lebanon, the data protection rules of your own country may also give you rights. Nothing in this policy takes those away.

03What we collect and where it comes from

The contact form

When you use the form on the Site we receive what you type: your name, your work email address, your company if you give it, your message, and any of the eight services you tick. Name, email and message are needed to answer you; the rest is optional and marked as such on the form, as Article 88 of the Data Protection Law requires. Not answering an optional question has no consequence other than a shorter reply. If your browser runs without JavaScript, sending the form takes you to a page on Formspree’s site, which is covered by Formspree’s privacy policy.

The container scan

The Site offers a scan that reads the Google Tag Manager setup of a page you name. When you run it, the address you type is sent to our own server, which fetches that page once and asks Google for the published container the page loads. We do not keep the address, the result, or any record that a scan took place: nothing about it is written to a database or to a log of ours. A counter held in memory limits how many scans one connection can run in a short period; it is not stored and is lost when the process ends. Our hosting provider’s standard server logs, described above, record the request as they record every other request to the Site. If you paste a page’s source instead of giving an address, that source is read in the same request and is likewise not kept. Sending a result to us is a separate step you take through the contact form, and only then does any of it reach us in a form we hold.

Email

If you write to tech@adaa-lb.com directly, we receive what you send and the information email carries with it: your address, the date and time, and the subject.

Technical data

The provider that hosts the Site keeps standard server logs: the IP address of the device that requested a page, the date and time, the page requested, the browser type and version, and the page that referred you. We use these only to keep the Site available and secure.

Your browser’s local storage

The Site keeps a few values in your own browser and nowhere else. In local storage: your best Ad-Man score and whether the game’s sound is on. For the current tab only (session storage): whether the loading animation has already played, your Signal check answers, and the state of the Lab demos. They stay on your device, are never sent to us, and can be removed with the “Forget me” button on the receipt in the Site’s footer or through your browser’s settings. The receipt itself is computed by your browser from its own timing and storage interfaces and is not transmitted. The Site sets no cookies of its own and, at the date of this policy, embeds no analytics, advertising or social-media trackers. If that changes, this policy will say so before it does.

What we do not collect

We do not ask for, and ask you not to send, data that reveals your health, genetic identity or sexual life, your political, religious or philosophical opinions, or any criminal record. Article 91 of the Data Protection Law forbids collecting the first three of these (health, genetic identity and sexual life) without a specific legal basis, and none of it is needed to talk about analytics or marketing engineering. If such data reaches us anyway, we delete it.

04Why we use it and on what basis

Article 87 of the Data Protection Law requires personal data to be collected faithfully, for legitimate, specific and explicit purposes, and to be proportionate to those purposes. Ours are:

• Answering your enquiry and discussing whether and how we can work together. We do this because you asked us to; it is the step that precedes any contract.
• Keeping a record of our correspondence. This is our legitimate interest in running the practice properly and, where work follows, in performing the agreement.
• Running and securing the Site. Server logs let the hosting provider and us detect abuse and keep the Site available.
• Meeting legal obligations. Tax and accounting rules, and lawful requests from Lebanese courts or authorities.

We do not send newsletters or promotional emails. If we contact you after an enquiry it is about that enquiry. Article 92 of the Data Protection Law gives you the right to object to any use of your data for commercial promotion; you will never need to, but if we ever change our practice we will ask for your consent first and make stopping as easy as sending one email.

We do not take decisions about you by automated means alone.

05Who receives it

Your data is seen by the people at Adaa who handle enquiries and, only to the extent each one needs it, by:

• the provider that hosts our email (tech@adaa-lb.com);
• Formspree, Inc., the service that receives what you send through the form on the Site and forwards it to our inbox. It runs on infrastructure in the United States, receives the technical details that come with any web request (such as your IP address and browser type) and keeps a copy of each submission in our Formspree account;
• the provider that hosts the Site, for the server logs described above, and for running the container scan on our behalf;
• Google, when a container scan asks it for a published Tag Manager container. That request is made by our server, not by your browser, so it carries our address and not yours, and it tells Google only which container was asked for;
• our accountants and legal advisers, bound by professional secrecy, when a matter requires it;
• courts and public authorities, when Lebanese law requires us to disclose data.

We do not sell personal data and we do not share it with advertisers or data brokers.

06Transfers outside Lebanon

Some of the providers above run their infrastructure outside Lebanon, typically in the European Union or the United States, so your data may be stored or handled there. When we choose such a provider we limit what it receives to what the service needs, we rely on its contractual commitments to security and confidentiality, and we list it in this policy. We work with clients across the MENA region and the same care applies to data we exchange with them.

07How long we keep it

Article 90 of the Data Protection Law allows data to be kept only for the period stated for the processing. Ours are:

• Enquiries that do not lead to work: up to twenty-four months after our last exchange, then deleted.
• Enquiries that lead to work: for as long as the relationship lasts and, afterwards, for the period during which Lebanese commercial and tax law requires us to keep business and accounting records.
• Copies of form submissions held by Formspree: deleted from our Formspree account on the same schedule as the enquiry they belong to.
• Server logs: for the period set by the hosting provider, which we keep to twelve months or less.
• Container scans: not kept at all. The address scanned and the result exist for the length of the request and are never written down.
• Local storage in your browser: until you clear it.

08Your rights

The Data Protection Law gives you rights that no agreement can take away (Article 85). You may:

• Ask whether we process data about you and obtain a copy of it, together with the purposes, categories, source and recipients of the processing (Article 99). A copy is free unless a request is repeated to the point of being abusive, in which case we may charge no more than the cost of copying (Article 100).
• Have data corrected, completed, updated or erased when it is inaccurate, incomplete, out of date, or no longer needed for the purpose it was collected for. We do this free of charge within ten days of your request and tell anyone we passed the data to (Article 101).
• Object, for legitimate reasons, to a processing, including any use for commercial promotion (Article 92).
• Withdraw a consent you gave at any time, without affecting what was lawfully done before.
• Not be subject to a decision based solely on automated processing of your data (Article 86).

To exercise a right, write to tech@adaa-lb.com from the address you used with us, or to our postal address. We may ask you to confirm your identity before acting, so that no one else can obtain your data. We answer within thirty days at the latest, and within the ten days the law sets for corrections.

If you believe we have not respected your rights, you may bring the matter before the competent Lebanese courts, including the Magistrate of Summary Justice, as Article 102 of the Data Protection Law provides, or raise it with the Ministry of Economy and Trade.

09Security

Article 93 of the Data Protection Law requires us to take the measures the nature of the data and the risks of its processing call for, so that it is not distorted, damaged or accessed by unauthorised persons. In practice: the Site is served over an encrypted connection; the form includes a trap field that stops most automated submissions; access to enquiries is limited to the people who answer them; our email and hosting providers apply their own security measures; and we delete data when the periods above expire.

No system is perfectly secure. If we become aware of an incident affecting your data we will tell you without undue delay and explain what we are doing about it.

10Children

The Site is meant for businesses and the people who work in them. It is not directed at anyone under eighteen, and we do not knowingly collect data from them. If you believe a minor has sent us data, write to tech@adaa-lb.com and we will delete it.

11Links to other sites

The Site may link to other websites. Their privacy practices are their own; this policy covers the Site only.

12Changes to this policy

The date at the top tells you when this policy was last changed. We update it when our practices or the law change, and for any change that affects you materially we say so on the Site before it takes effect.

13Contact

ADAA, Commercial Register No. 48/5014565 C.R. (Saida), Center Hamdan, DT Saida, Lebanon. Email: tech@adaa-lb.com.