Privacy policy

Last updated: 27 September 2026

This notice explains how SalamTechs handles personal information on salamtechs.com. Reading the site does not mean that you consent to other uses of your information.

Who is responsible and how to contact us

SalamTechs operates this website and is responsible for the personal information described here. For privacy questions or to exercise your rights, email info@salamtechs.com. You can also use our contact form and describe your privacy request. Please include an enquiry reference if you have one. Do not send a passport, payment details or other sensitive documents with your initial request.

Information we use and why

• Your enquiries: the name, email, phone number, organisation, message and business information you choose to submit, plus the form language, acknowledgement, reference, receipt date, status and our follow-up notes. We use these to answer you, assess a requested introduction or service, and keep a record of the exchange. Forms indicate when required information is missing; without them we may be unable to handle the request. Optional fields can be left blank.
• How you reached the form: we record the submitted form page. With your cookie consent, we also attach your first landing page, referring site, campaign tags (utm_…) and advertising click identifiers (gclid/fbclid, if present). These identifiers may be linked to you by advertising providers. They are stored privately with the enquiry and never included in our browser conversion event.
• Technical and security information: our hosting and security providers process connection information such as IP address, request time, requested address and browser information to deliver the site and prevent abuse. The forms use a keyed hash of the IP address for short-lived rate limiting; the enquiries database does not store raw visitor IP addresses in enquiry records.
• Correspondence: if you email us, we receive your sender address, message and any attachments. We use them to handle the matter you raise.
• Public business profiles: editorial pages may include professional names, roles and information from the public company sources linked on those pages. Contact us to request a correction or raise a privacy concern.

Submitting a form does not publish your details or subscribe you to marketing. We do not sell personal information or use automated decisions that produce legal or similarly significant effects about you.

Legal grounds

Where the GDPR applies, we use information to take steps you request before entering a contract or to perform it (Article 6(1)(b)); for our legitimate interests in responding to general business enquiries, maintaining accurate professional editorial content and securing the site (Article 6(1)(f)), subject to your rights and interests; and to meet applicable legal duties, including handling privacy rights requests (Article 6(1)(c)). The form acknowledgement confirms that you have read this notice; it is not consent to marketing. Where a separate activity relies on consent, you may withdraw it at any time without affecting earlier lawful processing.

Optional behaviour analytics

With your consent, Microsoft Clarity helps us understand clicks, scrolling and navigation through session recordings and heatmaps. It receives page, browser, device and interaction data. Strict text masking is enabled; form text is masked before upload. We do not send enquiry fields or customer identifiers to Clarity. Clarity is not loaded in administration, preview deployments or browsers marked as owner devices. It is not loaded before acceptance and stops when you reject optional cookies. Microsoft may process data internationally. See Microsoft’s privacy statement and Microsoft Clarity.

Cookies and browser storage

Optional measurement is off until you accept it. If configured, Google Tag Manager can load analytics and advertising tags after acceptance. Rejecting optional cookies does not prevent reading the site or submitting forms. We use Google Analytics and Microsoft Clarity through Google Tag Manager after acceptance. Hotjar, TikTok and Vercel Analytics are disabled. LinkedIn Insight Tag loads only after the separate “Analytics & marketing” choice on home, about, news-index and services landing pages. It is excluded from forms, administration, previews, owner devices, other content pages and addresses or referrers containing query strings. LinkedIn may receive the page URL, referrer, IP address, browser/device information, timestamps and button interactions for advertising measurement. We do not send form fields or customer identifiers, use enhanced matching, or send LinkedIn lead-conversion events. Enhanced conversion tracking is disabled in the LinkedIn account. Withdrawing consent reloads the page without the tag and removes accessible LinkedIn first-party cookies; our site cannot remove cookies on LinkedIn’s own domain. See LinkedIn’s privacy policy. Meta Pixel loads only if you separately choose “Analytics & marketing”. Analytics-only consent does not enable Meta. Meta receives page visits and a Lead event after the server accepts an enquiry, with the form category only; we do not send names, email addresses, phone numbers or message fields in these events. Meta may receive connection and browser information and use cookies such as _fbp and _fbc for advertising measurement. Automatic advanced matching and automatic event configuration are disabled. The pixel is excluded from admin pages, preview deployments, owner devices and pages or referrers with query strings. Your marketing choice is stored locally under salam-marketing-consent-v1. You can withdraw it through Privacy choices; choosing analytics only or declining clears accessible Meta cookies. See Meta’s privacy policy. We also use the following browser storage:

• Startup form draft: session storage keeps your draft in the current browser tab so you can move between form steps. It is cleared after a successful submission or when you clear the draft. Browsers normally clear it when the tab session ends, but a restored browser session may restore it. It is not sent to SalamTechs until you submit the form.
• Campaign attribution: after acceptance, the first-party cookie salam_lead_origin_v2 keeps the first landing page, referring site, campaign tags and click identifiers for 30 days. It is sent with a form only when you choose to submit. Your choice is remembered in salam_consent_v2 for 180 days. You can reopen Cookie settings at any time and reject optional cookies; this removes accessible tracking cookies and the attribution cookie. Attribution already submitted with an enquiry follows the enquiry retention period below.
• Administrator sign-in: the salamtechs_admin cookie authenticates authorised administrators for up to eight hours. It is Secure, HttpOnly and SameSite=Strict in production and is removed on sign-out.

You can clear website storage through your browser. This may remove a draft or sign you out. On rejection, the site removes accessible Google Analytics, Google Ads, Meta and Clarity cookies; it cannot clear cookies belonging to another website. With acceptance, configured Google analytics may receive device, visit and campaign data, and a successful enquiry event containing only form type and language, not your form fields. Google may process this information internationally. See Google’s privacy policy.

Who receives information

Access to enquiries is restricted to authorised SalamTechs administration. Vercel hosts and processes website requests. Supabase stores enquiries in a database in Zurich, Switzerland. Resend handles transactional receipt messages using your name, email, language and enquiry reference, and limited internal notifications. Email sent to our public contact address is routed through Cloudflare to our Google-hosted mailbox. These providers process the information needed to provide their services. We may disclose information when required by law or to establish, exercise or defend legal claims.

We do not automatically forward a submitted brief to a listed startup, hotel or other business. If an introduction requires sharing your details, we will explain the proposed recipient and purpose before doing so.

International processing

Our providers operate internationally, and information may be processed outside your country, including outside the European Economic Area. Resend stores email content and delivery logs in the United States. The enquiry database is in Switzerland, but this does not mean that all hosting, support and email processing occurs there.

The data-processing terms for Resend, Supabase and Cloudflare include the European Commission's standard contractual clauses for international transfers where those clauses apply. These clauses set contractual safeguards for transferred personal information. You can read the relevant terms through these links or contact us for information about the locations and safeguards applicable to your information and a copy of relevant safeguards.

How long information is kept

Enquiries and correspondence are kept while we handle your request and any resulting follow-up or business relationship. We review the continuing need when the matter closes. Further retention depends on outstanding obligations, a specific legal record-keeping requirement or a dispute; information that is no longer needed should be deleted or anonymised. There is no automatic fixed deletion period for all enquiries. Necessary records of a privacy request may be retained to demonstrate how it was handled.

The form rate-limit window is normally one minute; expired records are removed during administrative maintenance. Administrator sessions expire after eight hours. Hosting logs, email records and provider backups follow the relevant provider's retention and backup cycles; deleting an active enquiry does not instantly erase all backup copies.

Your rights

Where the GDPR applies, you may request access to and a copy of your personal information, correction of inaccurate information, erasure or restriction in the circumstances provided by law, and portability where processing is automated and based on consent or a contract. You may object to processing based on legitimate interests for reasons relating to your situation, and to direct marketing at any time. You may also withdraw any consent you have given.

Use info@salamtechs.com to make a request. We may ask for proportionate information to verify your identity before disclosing or changing records. We respond without undue delay and normally within one month of receiving a request. If the law permits an extension for a complex or numerous request, we will explain the reason and extension within that first month. Requests are normally free; any lawful exception will be explained.

You may complain to a data protection authority, including in the EU country where you live, work or believe an infringement occurred. See the European data protection authorities. You do not need to contact us first.

External links and changes

Links to hotels, booking providers, company websites and social networks take you to separate services with their own privacy practices. An affiliate link, where identified, may allow the destination provider to attribute a booking after you click; merely displaying it does not install a tracking cookie from that provider on this site.

We update this notice when the site's processing changes and show the revision date above. Any future optional tracking that requires consent must remain disabled until you choose to enable it.