Privacy Policy

Caroz Hassan is the data controller for the data the firm itself processes through this website.

The service is provided to you by Nordic Technologies L.L.C-FZ (licence no. 2653509.01), Meydan Free Zone, Dubai. The database is in Stockholm and web hosting is configured for Frankfurt. The platform is operated and hosted by Sev Nordic AB in Sweden, which is a sub-processor as listed above. Other processing, including images and AI visibility analysis through OpenRouter, can take place in the United States. Contact us for the agreements and transfer arrangements applicable to your processing.

Onesync processes this data on behalf of the firm and engages other providers to do so. They are listed, with what each one does and where, under Onesync’s sub-processors.

Questions can be sent to caroz@elephantus.ae.

• Contact details such as name, email address and phone number when you send a message.
• The content of your message, for example a question about the business or opening hours.
• Messages you write in the website chat.
• Name and email address if you sign up for news and offers, together with your consent.
• Technical information needed for security, troubleshooting and cookie handling.
• Consent choices for cookies and similar technology.

• To reply to messages and requests.
• To show accurate information about the firm, contact details and opening hours.
• To send news and offers to you if you have signed up, until you unsubscribe.
• To protect the website and manage consent.

• Legitimate interest: answering questions, protecting the website and showing information about the firm.
• Consent: newsletter, optional cookies.
• Legal obligation: if data must be retained by law.

The chat on this website is answered by an AI assistant, and sometimes by a person answering on behalf of the firm. The chat tells you an AI assistant is in use before you write anything.

To produce an answer, what you write — together with information about the firm such as the menu and opening hours — is sent to Onesync, which operates the website for the firm, and on to the sub-processor that runs the language model: Amazon Web Services EMEA SARL (Amazon Bedrock). It processes the data inside the EU: Frankfurt; configured EU cross-region profiles may also use Stockholm, Milan, Spain, Ireland and Paris.

Please do not write national identity numbers, health information or other sensitive data in the chat. To raise something of that kind, contact the firm directly.

The conversation is also stored in your own browser so you can continue it later. On a shared computer or tablet, clear your browsing data when you are done — otherwise the next person can read it.

Contact messages are kept only for as long as needed to handle the matter and any follow-up.

Chat conversations are kept for 90 days after the last message and are then deleted automatically.

Your sign-up for news and offers is kept until you unsubscribe.

Cookie choices are kept for 12 months, after which you are asked again. You can change them at any time from the link in the footer.

You can request access to, correction of, or deletion of your personal data. You can also object to certain processing or withdraw your consent.

If you believe your data is being handled incorrectly, you can contact the firm or file a complaint with the UAE Data Office, the authority under Federal Decree-Law No. 45 of 2021.

Questions can be sent to caroz@elephantus.ae.