Privacy Policy
This policy explains what personal information AVEEM collects through this website, why we collect it, and what we do with it.
In effect from
Who we are
Aveem Corporation DMCC ("AVEEM", "we", "us") is a green coffee supplier registered in the Dubai Multi Commodities Centre, with its registered office at Office No. 1908, HDS Tower, Cluster F, JLT, Dubai, UAE. We are the controller of the personal information described in this policy — that is, we decide why and how it is used.
You can reach us about anything in this policy at info@aveem.com or +971 4 552 6491.
What this policy covers
This policy covers this website. It does not cover the separate commercial relationship we may have with you as a customer or supplier, which is governed by the contract between us, nor any third-party website you reach through a link from here.
Our business is business-to-business. We do not knowingly collect information from consumers acting outside a trade or profession, and this website is not directed at children.
Information we collect
We collect personal information in two ways: because you gave it to us, and because a web server records the requests it answers.
- Information you send us through the enquiry form
- Your name, company, country, email address and your message, which the form requires; and your telephone number, the coffee or origin you are enquiring about, and an indication of volume, which it does not. These are the fields the form asks for and the only ones it stores.
- Information you send us directly
- If you email, call or message us instead of using the form, we hold whatever you choose to tell us in that message, together with the contact details it arrives with.
- Technical information
- Our hosting and infrastructure providers record standard server logs — including IP address, the page requested, the time of the request and the browser's user-agent string — as an ordinary part of serving and securing a website. We also record a request count against an IP address for short periods to limit automated abuse of the enquiry form and the administrator sign-in.
What we do not do
We think this is as useful to state as what we do:
- We use one analytics tool, Cloudflare Web Analytics, which counts visits and tells us which pages are read. It sets no cookie, gives us no way to identify you, and is never used for advertising. Beyond it we run no advertising pixels and no other third-party script.
- We do not track you across other websites, and we do not build advertising or behavioural profiles.
- We do not sell, rent or trade personal information, and we do not share it for anyone else's marketing.
- We do not add you to a mailing list because you sent an enquiry.
- We do not make decisions about you by automated means alone.
Why we use it, and on what basis
- To answer your enquiry
- The only reason the enquiry form exists. Responding to a request you made is necessary to take steps at your request before entering into a contract, and is in our legitimate interest as a business being asked to quote.
- To supply coffee and administer the relationship
- Where an enquiry becomes an order, we use your contact details to agree specifications, arrange shipment and documentation, and invoice — necessary for the performance of our contract with you.
- To keep the site secure and available
- Server logs and rate limiting protect the site against automated abuse. This is our legitimate interest in running a service that works.
- To meet our legal and regulatory obligations
- Including the accounting, tax, customs and trade records a UAE-registered trading company is required to keep.
Cookies and browser storage
This website sets no advertising or analytics cookies. There is nothing here to consent to, which is why you are not asked to dismiss a cookie banner.
- Administrator session cookie
- Set only when a member of our team signs in to the private content management area. It keeps them signed in and is strictly necessary for that area to work. If you are a visitor to the public site, this cookie is never set.
- Browser session storage
- The site records, in your browser's own session storage, that you have already seen the short opening animation, so it is not replayed on every page. It holds no personal information, is readable only by this site, and is discarded when you close the tab.
Who else handles it
We use a small number of established service providers to run this website. They process personal information on our instructions and for no purpose of their own:
- Website hosting
- Serves the website and generates the server logs described above.
- Database hosting (Neon)
- Stores enquiries submitted through the form.
- Email delivery (Resend)
- Delivers the notification of your enquiry to our inbox, and account emails to our own administrators.
- Image delivery (ImageKit)
- Stores and serves photographs used on the site. It receives the ordinary technical information involved in delivering an image.
We may also disclose information to our professional advisers, or to a regulator, court or public authority where we are required to do so by law.
Where it is held
We are based in the United Arab Emirates and our service providers operate internationally, so personal information may be stored or processed outside your country and outside the UAE. Where we transfer information across borders, we do so under the terms of our agreements with those providers and in line with applicable data protection law, including the safeguards required where information originates in a jurisdiction that requires them.
How long we keep it
We keep enquiries for as long as they are commercially useful — a sourcing enquiry that did not proceed this season is often relevant to the next — and then delete them. Where an enquiry becomes a transaction, we keep the associated records for as long as UAE accounting, tax and trade law requires. Technical rate-limiting records are kept for minutes, not months.
How we protect it
The site is served over HTTPS. The content management area is restricted to named accounts, protected by passwords that are stored only as one-way hashes, and access to the underlying database is limited to the application and to those who administer it. No system is perfectly secure, and we do not claim otherwise — but we would rather tell you what we actually do than offer a reassurance that cannot be tested.
Your rights
Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and under other data protection laws where they apply to you, you have rights over the information we hold about you. Depending on the circumstances, these include:
- To ask what personal information we hold about you, and to receive a copy of it.
- To have inaccurate or incomplete information corrected.
- To ask us to delete information we no longer have a reason to keep.
- To object to, or ask us to restrict, a particular use of it.
- To receive information you gave us in a portable, machine-readable form.
- To withdraw consent, where we relied on your consent, without affecting what we did before you withdrew it.
- To complain to the relevant supervisory authority.
To exercise any of these, email info@aveem.com. We will respond within the period the applicable law allows, and we may need to verify your identity first — which is itself a protection, since we should not hand your information to someone claiming to be you.
Changes to this policy
If we change how this site handles personal information, we will change this policy and update the effective date shown at the top. Where a change is significant, we will take reasonable steps to bring it to the attention of those it affects.
Contact us
Questions, requests and complaints about privacy should go to info@aveem.com, or by post to Aveem Corporation DMCC, Office No. 1908, HDS Tower, Cluster F, JLT, Dubai, UAE.
