How we handle your information.

Effective date: 29 October 2026

1. Who we are

This website is operated by Gameflow FZE LLC, trading as GAME-FLOW, a company registered with the Sharjah Publishing City Free Zone Authority, United Arab Emirates (licence number 4427389.01).

Registered address: Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates.

Gameflow FZE LLC is the controller responsible for personal information submitted through this website.

Privacy contact: georges@game-flow.ai

2. Information we collect

When you use our contact form

• Your name and email address
• Your company name (optional)
• The area you are interested in and your enquiry message
• Your confirmation that you have read this notice and agree to us handling your enquiry

To protect the form from spam and abuse, our server uses limited technical information: your connection's IP address and the time taken to complete the form. The IP address is held only in temporary server memory to limit repeated submissions and is not included in your enquiry email.

When you browse the website

The servers that deliver this website receive standard technical information, such as your IP address, browser type and the pages requested, in order to deliver and secure the site. Our website code does not intentionally add advertising or marketing tracking. Hosting services may also process technical events for delivery, security and error diagnostics.

3. How we use your information

• To answer your enquiry
• To assess a potential business relationship with you or your organisation
• To keep relevant correspondence
• To protect the website and the form against spam and misuse

We do not add anyone to a mailing list automatically, we do not sell personal information, and we do not use enquiry details for unrelated marketing.

4. Legal basis

UK and EU visitors (UK GDPR / EU GDPR)

We rely on our legitimate interests in handling business enquiries sent to us, assessing potential business relationships, keeping relevant correspondence, and taking proportionate steps to prevent spam and fraud. Where your enquiry relates to a possible contract with you, the processing may also be necessary to take steps at your request before entering into a contract.

United Arab Emirates

UAE data-protection law is assessed separately; meeting a UK or EU legal basis does not automatically satisfy it. We process enquiry information on the basis of the consent you give when you tick the box on our contact form, and, where applicable, because processing is necessary to take steps you have requested before entering into a contract. You may withdraw your consent at any time (see section 8).

5. Who processes your information

• Google (Gmail): your enquiry is delivered as an email to our business inbox, where it and our replies are stored.
• Lovable and its hosting infrastructure: they host this website, run the form's server-side checks and relay submissions securely to our email service.

The website's typefaces are served from our own website, so loading a page does not send your details to a font provider.

We use Google and Lovable to operate our contact form and website. Depending on their infrastructure and support arrangements, information may be processed in countries outside the UAE, UK or European Economic Area. Lovable's published Data Processing Agreement includes provisions for international transfers for Business customers. This does not establish the locations used for every service or the contractual coverage of our Google account. Where applicable law requires safeguards for a restricted transfer, those safeguards must be established for the relevant processing. You can request further information about our provider arrangements at georges@game-flow.ai.

6. How long we keep it

• Enquiries that do not lead to an engagement: kept for 12 months after our last meaningful interaction with you, then deleted, including related sent mail. We review our inbox manually each month; this is not automated deletion.
• Where an engagement begins: business, contractual and legally required records may be kept for a different period appropriate to those records.
• Spam-prevention data: recent attempts are counted over a 10-minute window in temporary server memory. Expired timestamps are filtered when the same connection submits again; entries may remain in memory until cleanup or a server restart. This is not permanent storage or automatic deletion after 10 minutes. Standard server logs kept by our hosting infrastructure are subject to that provider's own retention.

7. Cookies

Our website code does not intentionally set advertising or marketing cookies. This is not a statement that hosting services never use cookies, browser identifiers or technical telemetry. We have not yet verified all published-site behaviour. No optional analytics or advertising tools have been added by us. If consent-requiring technologies are introduced or identified, we will update this notice and provide the appropriate consent controls before enabling them.

8. Your rights

Depending on where you are located and the law that applies, you may have the right to:

• Access the personal information we hold about you
• Have inaccurate information corrected
• Have your information erased
• Restrict how we use your information
• Object to processing based on our legitimate interests
• Receive your information in a portable format, where applicable
• Withdraw consent at any time, where we rely on consent, without affecting processing already carried out
• Complain to the relevant data-protection authority, such as the UAE Data Office, the UK Information Commissioner's Office or your local EU supervisory authority

To make a request, email georges@game-flow.ai. We aim to respond within one month, subject to any legal exceptions or extensions. We may need to confirm your identity before acting on a request.

9. Security

Form submissions are sent over an encrypted connection and checked on our server before delivery. Email credentials are kept on the server and are never exposed in your browser. Please do not include sensitive or confidential information in your first message.

10. Changes to this notice

We may update this notice from time to time. The latest version, with its effective date, will always be published on this page.