Privacy notice

This notice explains what we do with personal data on this website (jumbat.com) and in Jumbat Studio (app.jumbat.com). It is written to reflect UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. Last updated: 9 October 2026 (version 2).

Who we are

Jumbat Project Management Services is a sole proprietorship registered in Abu Dhabi, United Arab Emirates, under Economic Licence CN-6035735. We are responsible for the personal data described here. For any question about this notice or your personal data, contact info@jumbat.com.

What we collect on this website

We collect only what you choose to send us. If you complete the enquiry form, that is:

• Your name
• Your company name, if you provide it
• Your email address
• Your phone or WhatsApp number, if you provide it
• The service and timeframe you select
• The content of your message

The Jumbat Studio enquiry form also asks for your company type, the approximate number of submissions you prepare each month, whether your clients mandate templates, and whether you would like to join a pilot. If you contact us by email or WhatsApp instead, we hold whatever you send in that message.

What we do not collect

This website sets no cookies and uses no advertising cookies, tracking pixels, session recording or analytics. We do not build behavioural profiles of visitors, and we do not sell, rent or share personal data with third parties for marketing purposes, by anyone, at any price.

The “Chat with Jumbat” assistant

The chat button on this website gives automated answers drawn from our published FAQs. It is not a person and it is not an AI model. Questions you type are matched to an answer inside your own browser and are not sent to us or to anyone else. Nothing leaves your device unless you choose “Start chat” or “Send it on WhatsApp” (which opens WhatsApp) or “Email it” (which opens your email app).

Information stored in your browser

The website stores two small, non-identifying settings in your own browser, for convenience only: your language choice on the home page (English or Arabic) and whether you have already seen the chat prompt during this visit. They are never sent to us and you can clear them at any time in your browser settings.

Jumbat Studio (app.jumbat.com)

When you create a Jumbat Studio account and use it, we process:

• Your email address, used to sign you in. Sign-in is provided by Cloudflare Access, which emails you a one-time code and sets a sign-in cookie that is strictly necessary for the service to work.
• Your account details: your name, company, phone number if you give it, and when you accepted the Studio terms.
• Project information you enter, such as project and stakeholder names, locations and logos.
• Order and payment records: what you ordered, when, the price, the invoice, and a record of which delivered files were downloaded and when. Card payments are handled by Ziina; we receive confirmation of payment and the last four digits of the card, never your full card number.
• Documents you upload, such as client templates, bills of quantities (any prices are rejected before storage), consultant comment sheets and the drafts Studio produces.

Your projects are stored on a Jumbat-controlled server located in the United Arab Emirates. Each project is visible only to the account that created it and to Jumbat’s administrator who prepares and checks the drafts. Projects are never shared with other customers.

AI processing. Studio prepares drafts with AI assistance. When a draft or revision is generated, the relevant document content is sent to Anthropic, PBC (United States) through its commercial API. Under Anthropic’s commercial terms, content sent through the API is not used to train its models. We use no other AI provider for your documents. Every draft is reviewed by a competent person before it is issued.

Deleting your data. You can delete a project, with all its files, at any time from the project page, and your whole account from the Account page; they are removed from Studio immediately. If you work in a team, the team’s owner and members can see the team’s projects, orders and invoices, and team projects stay with the team when a member leaves. Reports from the “Check a set” tool are deleted automatically after seven days. Backup copies, where they exist, are overwritten within 30 days. Order, invoice and payment records are kept even after a project or account is deleted, because UAE commercial and tax law requires them (see below).

Studio’s terms of use are set out in the Jumbat Studio terms.

Why we hold it

We use your information to respond to your enquiry and, if you become a client or Studio user, to deliver and administer the services you engage us for. The lawful basis is your consent when you submit a form, and the performance of a contract once one exists.

We do not add enquirers to a marketing list. If we ever introduce one, it will be opt-in and separate from these forms, and every message will include a one-click way to unsubscribe.

Service providers we rely on

Some of these providers process data outside the UAE, including in the United States and the European Union. We use them only for the purposes above, choose providers with recognised security and data-protection commitments, and do not allow them to use your data for their own purposes. If you prefer not to use a third-party form, email info@jumbat.com directly or message us on WhatsApp.

How long we keep it

Confidentiality of client information

Consultancy work and Studio projects necessarily involve sensitive commercial information: client templates, audit findings, incident records, non-conformities and internal documentation. We treat all of it as confidential. We do not disclose client information to third parties without instruction, and we do not name clients or use their information in marketing without written permission.

Your rights

Under UAE data protection law you may request access to the personal data we hold about you, ask us to correct it if it is inaccurate, ask us to delete it, withdraw consent for us to hold it, or object to a particular use. To exercise any of these, email info@jumbat.com. We will respond within thirty days.

Children

Our services are for businesses and professionals. This website and Jumbat Studio are not directed at anyone under 18, and we do not knowingly collect their personal data.

Security

Personal data is held in access-controlled email, file storage and the Studio server, protected by strong authentication. Studio requires a verified sign-in on every request and keeps each customer’s projects separate. Because we are a small practice, the number of people with access is minimal, in practice, one. No transmission over the internet is completely secure, so please do not send highly sensitive material through the website forms; we will arrange a secure channel if the engagement requires one.

Changes to this notice

If this notice changes materially, the revised version will be published on this page with a new “last updated” date, and Studio users will be told by email.