Who is responsible
The data controller is XEPA International Trading FZ-LLC, RAKEZ free zone, Ras Al Khaimah, United Arab Emirates (Licence 5039201). For anything on this page: hello@xepa.ae.
What this site does not do
- No cookies are set — not even "essential" ones.
- No analytics, no tracking pixels, no fingerprinting, no third-party embeds.
- Fonts are self-hosted: your visit is never disclosed to a fonts CDN.
- No advertising identifiers, no social buttons, no consent banner — because there is nothing to consent to.
The contact form
If you choose to write to us, we process the data you type — name, email, optional service interest and your message — for exactly one purpose: answering your enquiry. The legal basis under GDPR is your consent (Art. 6(1)(a)) and pre-contractual steps taken at your request (Art. 6(1)(b)).
Form submissions are delivered to our inbox via our hosting and email infrastructure (Cloudflare, and Resend as email processor). We keep correspondence for as long as the conversation and any resulting business relationship require, then delete it.
Your rights
Under the GDPR (for visitors in the EU/EEA) you may request access, rectification, erasure, restriction, portability, and withdraw consent at any time. Write to hello@xepa.ae — response within one business day, like everything else. You may also lodge a complaint with your local supervisory authority.
Hosting
This site is served from Cloudflare's global edge network. Cloudflare may process technical connection data (such as IP addresses) as an independent measure to operate and protect its network; we run no server-side logging of our own on top of it.
Changes
If this policy changes, the change appears here with the site's next deployment. The promise it opens with — no cookies, no trackers — is not planned to change.