How we collect, use, store and protect personal data — across this website, the products we operate, and the work we do for clients. Written to be read, not survived.
Omelatte FZ-LLC is a product design and engineering studio registered in Ras Al Khaimah, United Arab Emirates, operating from Al Mamourah Street, RAK. We build software for clients, we operate our own products including Ledgerly and PeerMed, and we publish themes on the Shopify Theme Store.
For anything in this policy, write to info@omelatte.com. We are the data controller for information collected through omelatte.com and for our own products; when we build or run systems for a client, that client is normally the controller and we act as their processor under a written agreement.
Your name, email address, phone number, company, and whatever you write in a message when you use the contact form, email us, or book a call. If you become a client, we also hold the commercial and billing details needed to work together.
Standard server logs — IP address, browser and device type, pages requested, referring page, and timestamps. We use this to keep the site available, diagnose faults, and understand which pages are useful.
Ledgerly and PeerMed hold data that customers enter. Ledgerly holds business and accounting records. PeerMed holds clinical case material, de-identified of patient identifiers at the point of submission. Each product is governed by its own agreement with the customer, which takes precedence over this website policy.
We do not buy contact lists, we do not run third-party advertising pixels on this site, and we do not build behavioural profiles for marketing.
Where the UAE Personal Data Protection Law or the GDPR applies, our legal bases are: performance of a contract, our legitimate interest in running and securing the business, compliance with a legal obligation, and consent where we ask for it — which you can withdraw at any time.
This website uses only what it needs. A small preference is stored in your browser to remember whether you chose the dark or light theme; it never leaves your device and identifies nothing about you. We do not set advertising cookies and we do not share browsing data with ad networks.
If we later add analytics, this page will say so before it goes live, and you will be asked first where consent is required.
We do not sell personal data. Ever. We share it only with:
Some providers operate outside the UAE. Where data moves across borders, we rely on providers offering adequate protection and on contractual safeguards including standard contractual clauses.
Encryption in transit and at rest, role-based access limited to people who need it, audit logging on systems that hold sensitive material, and de-identification of personal health information at the point of entry in PeerMed. Our product infrastructure can be deployed in a private cloud or on-premise where an institution requires it.
No system is beyond compromise. If a breach affects your personal data and creates a risk to you, we will notify you and the relevant authority within the timeframes the applicable law requires.
Enquiries that do not become projects: up to twenty-four months, then deleted. Client records: for the life of the engagement plus the retention period required by UAE commercial and tax law — currently five years. Product data: as set out in each product agreement, and returned or deleted on request when the account closes. Server logs: rotated within twelve months.
You can ask us to show you what we hold, correct it, delete it, restrict how we use it, or hand it to you in a portable format. You can object to processing based on legitimate interest, and withdraw consent where you gave it.
Email info@omelatte.com and we will respond within thirty days. We will not charge you for a reasonable request and we will not make the process difficult. If you are unhappy with our answer, you may complain to the UAE Data Office or, where the GDPR applies, your local supervisory authority.
Our website and products are for businesses and professionals. We do not knowingly collect personal data from anyone under eighteen. If you believe a child has provided us data, write to us and we will delete it.
If we change how we handle personal data, we will update this page and change the date at the top. Material changes affecting existing clients or product customers are notified directly rather than left here to be discovered.
Ask a person, not a form. We answer privacy questions directly and we will tell you plainly what we hold.