Privacy Statement

01 Who we are

BE SMART ME FZCO is an ELV, ICT and hospitality-technology company registered in the United Arab Emirates. We are the controller of the personal data described here.

02 What we collect

Information you give us

There are two forms on this website, and both are optional to use.

• Contact form. Your name, company name, email address, a contact number, and whatever you write in the message field.
• Client questionnaire. Business name, contact person, email address, phone number, country and city, plus operational details about the venue you are asking us to quote for — number of outlets, tills, staff and printers, printer and hardware preferences, currency, menu languages, which product features interest you, and any free-text notes you add.

If you email or call us directly, we hold that correspondence too, for the same purposes described below.

Information collected automatically

• Server logs. Our hosting provider records the IP address, browser type and version, the pages requested and the time of the request. This is standard web-server logging used to serve the site and defend it against abuse.
• Anti-spam and layout fields. Each form carries a hidden decoy field that only automated bots fill in, and records your browser window size so we can diagnose layout faults. Neither identifies you.

03 Why we use it, and on what basis

We do not send marketing emails from this website. If that ever changes, we will ask for your consent first and every message will carry a one-click unsubscribe.

04 Who else is involved

We keep the number of third parties deliberately small. Each one below acts on our instructions, or receives only what is technically necessary to serve you a page.

We may also disclose personal data where we are legally required to — for example to a regulator, court or law-enforcement authority acting within its powers.

05 Cookies and local storage

The public pages of this website set no cookies. There is no consent banner because there is nothing to consent to.

Two areas of this domain are private staff tools — the admin portal at /adminsec and the internal Q&I web app at /qi. They are not open to the public: signing in requires a Microsoft work account on our own tenant. Once signed in, they keep a sign-in token in your browser’s session storage so you are not asked to authenticate on every page. That token is cleared when you close the tab, and it never leaves your browser.

06 Where your data is held

We operate from the UAE, but the providers listed in section 04 run global infrastructure, so your data may be stored or processed outside the UAE — including in the European Union and the United States. Where a transfer is subject to UAE or EU data-protection law, we rely on the safeguards those providers offer, such as standard contractual clauses in their data processing agreements.

07 How long we keep it

• Enquiries that do not become projects — up to 24 months, then deleted.
• Questionnaires and quotations — kept for the life of the commercial relationship.
• Client and contract records — retained as long as UAE tax and accounting law requires, currently a minimum of five years.
• Server logs — kept for a short period by our hosting provider under its own retention schedule.

You can ask us to delete your data sooner — see section 08.

08 Your rights

Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data — and, if you are in the European Economic Area or the United Kingdom, under the GDPR — you can ask us to:

• tell you what personal data we hold about you, and give you a copy;
• correct anything that is wrong or incomplete;
• delete your data, where we have no continuing legal reason to keep it;
• restrict or object to how we are using it;
• transfer it to another provider in a portable format;
• withdraw consent you previously gave, without affecting anything done beforehand.

Write to sales@besmart-me.com and we will respond within 30 days. We may ask you to confirm your identity first. If you believe we have handled your data improperly, you may complain to the UAE Data Office or, in the EEA or UK, to your national supervisory authority.

09 Security

The site is served over HTTPS. Form submissions travel encrypted, and access to them is limited to the people at BeSmart who need it. Our staff portals are protected by Microsoft work-account sign-in on our own tenant. No system is perfectly secure, but if a breach ever affects your personal data we will notify you and the relevant authority as the law requires.

10 Products we install for clients

This statement covers this website only. When we deploy BeSmart POS, Maro or any other system into a client’s venue, that client is the controller of the data their system handles — including their guests’ orders and, where the voice assistant is enabled, guest speech. Our role there is that of a processor acting on the client’s instructions, governed by the contract and data processing terms agreed with them, not by this page.

11 Children

This website sells business systems to businesses. It is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.

12 Changes to this statement

We will update this page when our practices change. The date below always shows the current version. Material changes will be signposted on the page itself.

Last updated: 31 August 2026