This Privacy Policy explains how Maison Azure Technical Services L.L.C. collects, uses, shares, stores and protects personal data from visitors, clients and partners across maison-azure.com, the client and partner portal, and the La Belle Maison and Yacht IQ brands.
Who we are and what this policy covers
Maison Azure Technical Services L.L.C. (“Maison Azure”, “we”, “us”) is a company registered in Dubai, United Arab Emirates (trade licence 968698). We operate the Maison Azure interior-fitout and technical-estimating business, together with our La Belle Maison wallcoverings brand and our Yacht IQ superyacht-refit and technical-estimating brand.
This Privacy Policy covers:
- our website at maison-azure.com, including its journal, contact form and product enquiry forms;
- the Maison Azure client and partner portal, available by invitation at maison-azure.com and, once released, as a mobile app on the App Store and Google Play;
- our newsletter; and
- any other Maison Azure service that links to this policy.
It does not cover third-party sites we link to, or the separate privacy practices of platforms such as Apple or Google once you leave our service.
Information we collect
Account and portal data — your name, email address, password (stored as a salted hash, never in plain text), company or role, and which projects and permissions you have been invited to.
Project data — the content added to a project room by you, your colleagues, or Maison Azure staff: documents, photographs, drawings, specifications, messages, approvals and status updates for an interior-fitout, refit, or wallcovering project.
Files — documents and images uploaded to a project, stored in Maison Azure’s Google Drive.
Contact-form submissions — your name, email address and message. These are emailed to our studio and are not stored in our database.
Product enquiries — when you ask about TRAME or SILÉA (samples, pricing or a project): your name, email address, company if given, the design or colour you are interested in and your message. These are emailed to our studio and a copy is kept in our database so we can follow up.
Newsletter sign-ups — your email address and the date you signed up, managed through Klaviyo.
Technical data — standard web and application logs (IP address, browser and device type, pages visited, timestamps), generated automatically by our hosting provider.
We do not ask you to submit payment-card numbers or government ID numbers through the website or portal. Any such information exchanged in the course of a quotation, contract or payment is handled separately, outside the data flows described here.
How we use your information
We use personal data to:
- create and manage your portal account, verify who you are, and control which projects and files you can see;
- deliver the service itself — showing you project status, files, messages and approvals, and sending related notifications such as invitations, password resets and sign-in confirmations;
- respond to enquiries submitted through our contact form and product enquiry forms;
- send our newsletter to subscribers who sign up for it, and let them unsubscribe at any time;
- keep the website and portal secure and working, including diagnosing problems from technical logs; and
- meet our legal, accounting and regulatory obligations as a UAE-registered company.
We do not sell personal data, and we do not use portal or project data for advertising.
Our legal basis for processing
Maison Azure is established in Dubai, UAE, and we process personal data primarily under the UAE’s Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “UAE PDPL”). Under the PDPL, we rely on:
- your consent — for example, when you sign up to the newsletter or submit the contact form or a product enquiry;
- performance of a contract — to create your portal account and deliver the project services you or your organisation have engaged us for; and
- our legitimate business interests — such as keeping the website and portal secure and working — weighed against your rights and interests.
If you are located outside the UAE and a stricter data-protection law applies to you (for example, the EU/UK GDPR), we aim to honour the rights described in this policy for you as well, even though the UAE PDPL is our primary compliance framework.
Who we share your information with
We share personal data only with the service providers who help us run the website and portal, under their standard commercial terms, and never for their own marketing.
| Provider | What they handle | Where |
|---|---|---|
| Supabase | Portal account authentication and project database; a copy of TRAME and SILÉA product enquiries | Frankfurt, Germany (EU) |
| Railway | Website and portal hosting | Amsterdam, Netherlands (EU) |
| Resend | Email delivery — portal invitations, sign-in links and password resets, and forwarding contact-form and product enquiries to our studio | Sent from Ireland (EU); Resend stores account and email-log data in the United States |
| Google Workspace / Google Drive | Project files and documents | Per Google Workspace’s standard data-location terms |
| Klaviyo | Newsletter subscriber list and delivery of The Dispatch | United States |
| GitHub | Hosts our website/portal source code (not personal data) | United States |
| Apple / Google Play | App distribution, and account/download data collected directly by Apple or Google once our mobile app is live | United States, under Apple’s and Google’s own privacy policies |
We may also disclose personal data where required by law or by a UAE court or regulator, or to protect the rights, property or safety of Maison Azure, our clients, or others.
International data transfers
Because we use international cloud providers, personal data may be processed outside the UAE — principally in the European Union (Supabase, Railway) and the United States (Resend’s stored account and email-log data, Klaviyo, GitHub, and Apple/Google once the app is live). We choose providers that maintain recognised security standards, and where the UAE PDPL requires it, we rely on contractual safeguards or the provider’s own data-protection commitments for these transfers. If you are in the UAE, this means your data will routinely leave the country as part of how the service is built; if you are outside the UAE, your data may also pass through these same providers regardless of where you are.
How long we keep your data
- Portal account and project data — for as long as your account is active, and for a reasonable period afterwards to meet our contractual, accounting and warranty obligations.
- Contact-form messages — kept in our studio mailbox for as long as needed to handle your enquiry, then deleted or archived.
- Product enquiries — for as long as needed to handle your enquiry and any resulting order, then deleted.
- Newsletter subscriber data — until you unsubscribe.
- Technical and server logs — for a limited period, for security and troubleshooting.
When we no longer need personal data for these purposes we delete or anonymise it, except where UAE law requires us to keep it for longer (for example, statutory accounting-record retention).
Security
We protect personal data with encrypted connections (HTTPS) across the website and portal, encrypted storage of passwords, database-level access controls that restrict each portal user to their own projects (row-level security), and restricted administrator access to our hosting, database and file-storage accounts. No system is completely secure and we cannot guarantee absolute security, but we review our providers’ configurations as the portal develops.
Your rights
Subject to the UAE PDPL, you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data, subject to our legal and contractual retention needs;
- object to, or ask us to restrict, certain processing, including direct marketing;
- withdraw consent at any time for processing that relies on it (for example, the newsletter), without affecting processing already carried out; and
- complain to the UAE Data Office, or to the relevant regulator in your own country if applicable.
To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request.
Cookies and similar technologies
Our website and portal use strictly necessary cookies to keep you signed in and remember your session; the portal cannot work without these. We do not currently use advertising or cross-site tracking cookies. If we add analytics or marketing cookies in future, we will update this policy and, where required, ask for your consent first.
Children’s privacy
Our services are intended for businesses, professional partners and adult clients. We do not knowingly collect personal data from children, and the portal is not directed at them.
Changes to this policy
We may update this Privacy Policy from time to time — for example, as we add features such as the mobile app, or as UAE data-protection rules develop. We will post the updated version here with a new “last updated” date and, for material changes, take reasonable steps to notify active portal users.
Contact us
For any question about this policy or your personal data, contact Maison Azure Technical Services L.L.C. at privacy@maison-azure.com or at our registered address: Office X28-901, Business Bay, Dubai, United Arab Emirates.