Privacy Policy.

1. Who we are

This Privacy Policy is issued by 3 Folds FZC, trading as 3FOLDS (“3FOLDS”, “we”, “us” or “our”), a creative consultancy registered at Sharjah Research Technology and Innovation Park (SRTIP), Sharjah, United Arab Emirates, and operating as the creative and production arm of The Briefcase. 3FOLDS is the controller of the personal data described in this Policy for the purposes of the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, “PDPL”) and, where applicable to visitors in the European Union or United Kingdom, the General Data Protection Regulation (“GDPR”).

This Policy explains what personal data we collect when you visit iiifolds.com or contact us, why we collect it, how long we keep it, who we share it with, and the rights available to you.

2. Scope

This Policy applies to personal data we collect through this website, our contact and enquiry forms, email correspondence, and in-person or virtual meetings connected to a prospective or active engagement. It does not apply to third-party websites we may link to, or to personal data we process on behalf of a client under a separate signed agreement, which is governed by the terms of that agreement.

3. What personal data we collect

• Contact and enquiry data — name, email address, phone number, organisation, the service pillar you are enquiring about, and any project details you choose to share, when you submit our contact form or email us directly.
• Correspondence data — the content of emails, calls or meeting notes exchanged with you once a conversation begins.
• Technical and usage data — IP address, browser and device type, pages visited and referring URLs, collected automatically through standard web server logs and, if enabled, analytics or advertising cookies (see Section 9).
• Business contact data — where you represent a client, supplier or partner organisation, the professional contact details of individuals we deal with in the course of that relationship.

We do not knowingly collect special categories of personal data (such as health, religious or biometric data) through this website, and we ask that you do not include such information in any message to us.

4. How we collect personal data

• Directly from you, when you fill in the contact form, email us, call us, or meet with us.
• Automatically, through cookies and similar technologies when you browse this website (see Section 9).
• From publicly available sources or introductions, where you are put in touch with us by a mutual contact or partner such as The Briefcase.

5. Why we use your data and our legal basis

• To respond to your enquiry and discuss a potential project — legal basis: steps taken at your request prior to entering into a contract, or our legitimate interest in responding to business enquiries.
• To deliver a service once you become a client — legal basis: performance of a contract.
• To operate and improve this website, including basic analytics — legal basis: legitimate interest, or your consent where required for non-essential cookies.
• To comply with legal, tax or regulatory obligations — legal basis: legal obligation.
• To send occasional updates about our work, only where you have opted in — legal basis: consent, which you may withdraw at any time.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

6. How we share your data

We do not sell or rent your personal data. We may share it with:

• Service providers who process data on our behalf, such as our email and hosting providers, strictly to help us operate this website and communicate with you, and only under confidentiality obligations.
• The Briefcase and its group companies, where a project or mandate is delivered jointly, as described in our Services.
• Professional advisers such as lawyers or auditors, where necessary to protect our legal rights.
• Regulators or authorities, where we are required to do so by UAE law or a valid legal process.

7. International data transfers

3FOLDS is based in the United Arab Emirates. Some of our service providers (for example, email or cloud hosting infrastructure) may process data outside the UAE, including in jurisdictions that are subject to the GDPR. Where we transfer personal data internationally, we take reasonable steps to ensure it continues to benefit from an appropriate level of protection, consistent with the requirements of the PDPL and, where applicable, GDPR safeguards such as standard contractual clauses.

8. How long we keep your data

We keep enquiry and correspondence data for as long as reasonably necessary to respond to you, pursue a potential engagement, and afterwards for a limited period to maintain our business records, generally not exceeding 24 months from your last contact with us unless a longer period is required by law or you become a client, in which case data connected to that engagement is retained in line with our contractual and statutory obligations. You may ask us to delete your data earlier — see Section 11.

9. Cookies and data security

This website may use essential cookies required for it to function, and, where enabled, analytics cookies to help us understand how visitors use the site. You can control or disable cookies through your browser settings at any time; disabling essential cookies may affect how parts of the site work.

We apply reasonable technical and organisational measures — including access controls, encrypted connections (HTTPS) and restricted staff access — to protect personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Your rights

Subject to applicable law, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data, subject to any legal obligation we have to retain it.
• Object to or request that we restrict certain processing.
• Request a copy of your data in a portable format, where technically feasible.
• Withdraw consent at any time, where processing is based on consent, without affecting processing already carried out.
• Lodge a complaint with the UAE Data Office, or with your local supervisory authority if you are located in the EU or UK.

To exercise any of these rights, contact us using the details in Section 14. We will respond within the timeframe required by applicable law.

11. Children’s privacy

This website and our services are directed at businesses and professional individuals. We do not knowingly collect personal data from children, and we ask that anyone under the age of 18 does not submit personal data to us through this website.

12. Third-party links

This website may contain links to third-party websites, including client work, social media and partner sites. We are not responsible for the privacy practices of those third parties, and we encourage you to review their own privacy policies.

13. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “last updated” date at the top of this page shows when it was last revised. Material changes will be reflected here; we encourage you to review this page periodically.

14. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

• Email: unfold@iiifolds.com
• Post: 3 Folds FZC, Sharjah Research Technology and Innovation Park (SRTIP), Sharjah, United Arab Emirates