Privacy Policy

Who we are

Fifty for Business (خمسين للأعمال), commercial registration 1383537, Sultanate of Oman.

For anything in this notice, write to info@fiftyb.com.

This notice covers this website. It does not cover the other sites we link to, or the registration form a course may be booked through, each of which is run by someone else under its own notice.

What we collect

The contact form asks for your name and company, your email address, the services you are interested in, and whatever you tell us about your project; it reaches us as email, and nothing you type is stored in a database on this site. The newsletter form asks only for an email address. Signing up sends it to us as email and adds it to our mailing list, which Resend keeps for us. If the address is already there, it is left exactly as it is: signing up again never re-subscribes an address that has unsubscribed.

Our host records ordinary server logs — the address of the request, the page asked for, the time, and the browser's own description of itself. These are kept briefly and used to keep the site running and secure.

We also count how the site is used. Vercel Analytics counts every visit, without cookies; Google Analytics looks closer, and only if you allow it. Between them they record the pages opened, the site or search that sent you here, the country or city the visit came from, the device, browser and screen, and how long a page was open. This is counting, not profiling: neither tool is given your name, neither receives anything you type into a form, and neither shows us your IP address in its reports.

When you send either form, a few technical checks tell people apart from automated spam. Your IP address and the email address you give are turned into one-way codes that count how many times the form has been sent, and the counts are deleted within a day; a signed token records when the form was opened, so a script that sends in an instant is turned away; and Vercel BotID checks the request your browser makes as the form is sent. None of this sets a cookie or is used for anything else. We rely on our legitimate interest in keeping the forms working and our inbox free of spam.

Cookies and analytics

Google Analytics does not run on this site until you choose Accept in the cookie notice that appears on your first visit. If you choose Reject — or your browser sends a Global Privacy Control signal, which we treat as Reject — it never loads, and the site works exactly the same. Vercel Analytics, described below, sets no cookies and is not part of that choice: it counts every visit.

Google Analytics 4 is provided by Google Ireland Limited, with Google LLC as its processor. Once you accept, it sets two cookies: _ga, which gives your browser a random number so that a second page can be counted as the same visit rather than a new one, and one whose name begins _ga_, which keeps the current session. They contain no name, no address and nothing you wrote to us, and both expire after 13 months. Google Signals and every advertising feature are switched off, so the data is not used for advertising or linked to a Google account, and Google Analytics does not store IP addresses.

Vercel Analytics (Vercel Inc.) sets no cookies and stores nothing on your device, which is why it runs without asking. It counts a page view as it happens — with the page, the site that sent you here, the approximate location, and the type of device, operating system and browser — using a hash of the request that is discarded within 24 hours, so it cannot recognise you on a later day. We see only totals.

Google Analytics runs only on the basis of your consent — Article 6(1)(a) of the EU General Data Protection Regulation, and the consent provisions of the Sultanate of Oman's Personal Data Protection Law (Royal Decree 6/2022). How to withdraw it is set out under the next heading. Vercel Analytics rests on our legitimate interest in knowing how many people use the site and which pages help them (Article 6(1)(f) of the same Regulation); because it identifies no one and stores nothing on your device, it does not depend on the cookie notice.

Your answer is kept in your browser's local storage for 12 months, after which we ask again. It is not a cookie and is never sent to us.

Apart from the two Google Analytics cookies, this site sets one cookie of its own, fifty-locale. It holds only the language you last read the site in — en or ar — so that the site's address without a language in it opens in that language next time. It lasts a year, and it is sent to this site with each request, because the server is what reads it. If a script fails to load, the site also keeps a short-lived note in your browser's session storage so that it reloads the page only once, and clears it as soon as the page is working. Both exist only to make the site work as you asked it to, neither is shared with anyone, and clearing your browser data removes them.

Two things on the site come from elsewhere, and only when they are needed. Where a project has a film, it plays in YouTube's privacy-enhanced player (youtube-nocookie.com) or in Vimeo's, and the player is loaded only when you open the film in the project's gallery; from then on it is YouTube's or Vimeo's own page inside ours, under their own privacy policies, and it may store data in your browser as they describe. And where the contact page shows a live map, it is drawn by Mapbox, whose map library keeps a random identifier and the date it last reported in your browser's local storage — Mapbox counts how often its maps are loaded with them — and may keep map tiles in your browser's cache so that they draw faster.

There is no advertising here. No advertising, remarketing or ad-personalisation feature of Google Analytics is switched on, we run no advertising pixels, and nothing collected on this site is sold or handed to data brokers.

Turning Google Analytics off

You can refuse Google Analytics and lose nothing. Choose Reject when the cookie notice asks, or at any later time choose Cookie settings at the foot of any page and then Reject. If you had accepted, Google Analytics stops at once and its cookies are deleted, and it does not load again. Withdrawing does not affect measurement that took place before it. Vercel Analytics is not part of this choice: it keeps nothing on your device, so there is nothing of it to withdraw.

Your browser can say no on its own, too: a Global Privacy Control signal is treated as Reject, blocking cookies or running an ordinary tracking blocker stops Google Analytics, and Google publishes a browser add-on that turns it off on every site, at tools.google.com/dlpage/gaoptout.

Nothing on this site depends on either tool: the pages, the forms and the map work exactly the same with Google Analytics refused, or with both blocked in your browser. Because the reports do not identify anyone, we cannot pick your visits out of them to delete — withdrawing through Cookie settings, or clearing the cookies in your browser, is what removes your side of it.

Who else sees it

Resend delivers the mail our forms generate and keeps the newsletter's mailing list. Upstash stores the short-lived, one-way counters that limit how often the forms can be sent. Vercel hosts the site and produces the server logs described above, checks form submissions for automated traffic with Vercel BotID, and provides Vercel Analytics, which counts page views without cookies. Google provides Google Analytics, which runs only if you accept it. Sanity stores the text and images we publish — it holds nothing about visitors. The map on the contact page is drawn by Mapbox, which sees the request your browser makes for it when you open that page.

Each of them is a company engaged to do one job for us, and none is free to use what it sees for its own ends beyond running its service. We do not sell anything you give us, and we do not share it for advertising.

The players a project's film opens in are different. YouTube and Vimeo do not work for us: they load only when you open the film, and what they collect from then on is governed by their own privacy policies, not by this one.

Where it is processed

These companies run their servers outside Oman, mostly in Europe and the United States, so information collected through this site is processed abroad and travels there to be. We use established providers with published data-protection terms and ask nothing of them beyond running the site.

The two analytics services may process what they collect in the United States. Google LLC and Vercel Inc. are certified under the EU–U.S. Data Privacy Framework, and both use standard contractual clauses where that framework does not apply.

How long we keep it

Enquiries stay in our mail for as long as we may need them to answer you and to keep a record of work discussed. Newsletter addresses stay on the list until you unsubscribe or ask us to take you off it. The anti-spam counts described above are deleted within a day.

Analytics is kept short and in aggregate: Google Analytics is set to discard visit-level records after fourteen months, leaving totals only, and Vercel Analytics keeps counts rather than visits. Server logs are held briefly by the host.

Keeping it safe

The site is served over HTTPS, and the accounts behind it are reachable by the few people who need them. We ask for no payment details, no identity documents and nothing sensitive — please do not send any through the forms, which deliver as ordinary email.

Children

This site is addressed to organisations and the people who work in them. It is not directed at children and we do not knowingly collect anything from them. If you believe a child has sent us something, write to us and we will delete it.

Your choices

Write to info@fiftyb.com to ask what we hold about you, to correct it, to have it deleted, or to be taken off the newsletter. We will answer within a reasonable time and without charge.

You can also ask for a copy of what you sent us, or ask us to stop using it. Where the law gives you further rights — the Sultanate of Oman's personal data protection law, or the European rules if you are writing from there — we will honour them, and if we cannot do what you ask we will tell you why.

Where we rely on your consent — for Google Analytics — you can withdraw it at any time under Cookie settings at the foot of any page, as easily as you gave it. Withdrawing does not affect what was measured before.

Changes

If this notice changes, the date at the top changes with it. Material changes will be described here rather than made quietly.