Privacy notice

Bosla Art Consultancy L.L.C. ("Bosla", "we") is a Dubai-registered company at Court Tower, Iris Bay, Business Bay, Dubai, United Arab Emirates. This notice explains what personal data this website collects, why, and what you can do about it. It is written to meet the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and the standards of the GDPR where they apply to visitors from elsewhere.

What we collect, and why

When you use Start With Direction, Request Access or the artist application: the fields on that form — your name, company, role, email, phone (if you give it), the project type, location, stage, budget band, timeline and the description you write. We collect only what is on the form. We use it to reply to you, to assess whether Bosla can help, and — if you become a client, portal member or network artist — to run that relationship. The legal basis is your consent when you send the form and, afterwards, the steps needed to enter into a contract with you.

When you browse: our analytics records page views and clicks on calls to action (for example that a visitor pressed "Start With Direction" from the homepage). It never records what you type into a form. It is provided by Vercel Web Analytics and does not use cookies or track you across other websites.

Technical logs: our hosting and error-monitoring providers (Vercel, Sentry) keep short-lived request logs, including IP addresses, to keep the site running and to diagnose faults. Public forms are rate-limited by IP address to prevent abuse; the counter is discarded within hours.

We do not sell personal data, and we do not use it for automated decision-making.

Where it goes

Form submissions are stored in our database, hosted by Supabase in the Mumbai (ap-south-1) region, and may be emailed to Bosla staff by our email provider (Resend). Files you upload in the future are stored with Cloudflare. Each provider processes data only on our instructions. Data may therefore be held outside the UAE; we choose providers with recognised security certifications and contractual safeguards.

How long we keep it

Enquiries, access requests and applications that do not lead to a relationship are deleted or anonymised within 24 months of the last contact. Client, portal and network records are kept for the life of the relationship and then for the period UAE commercial and tax law requires (currently five years for accounting records).

Your rights

You may ask us to access, correct, delete or export the personal data we hold about you, to restrict or object to its processing, or to withdraw consent. Email info@boslaac.com with the subject "Privacy". We respond within one month. You may also complain to the UAE Data Office.

Children

This site and its forms are for businesses and adults. We do not knowingly collect data from anyone under 18.

Changes

We will update this notice when our processing changes and show the date of the last update at the top of this page.