Privacy policy
Version dated 17 October 2026. This policy describes processing on the Dubai For French preregistration site.
Data controller
Ramzi MOUHLI, the individual responsible for the Dubai For French project. For questions about your data: contact@dubaiforfrench.com.
Data collected and purposes
We process your first name, last name, email address, profile type and record of acceptance to create and manage your account and preregistration. Your password is handled by Supabase Auth; it is not stored in plain text in profile tables.
Your city, country, phone number and photo are optional and help complete your profile. Photos stay private. Invitation codes and links attribute a registration to its referrer without revealing the referred person’s identity or contact details.
Confirmation, profile-update, news-reading and deletion-request dates help us manage your account and progress. Hosting providers may process technical logs necessary for security.
You can also provide optional information to prepare your project: date of birth, professional activity and situation, planned departure, availability, desired roles and sectors, contract type, salary expectations, languages, skills, introduction and LinkedIn link. You can add a CV and cover letter as PDF files. This information and these documents stay private during prelaunch and are not automatically sent to recruiters. You can edit them or remove documents from your profile.
Legal bases
Managing your account and preregistration is based on providing the service you requested. Marketing communications rely on your separate, optional consent, which you can withdraw in your account. Security processing relies on the legitimate interest in protecting the service and preventing abuse.
Recipients and location
Only the controller and authorised people can access the necessary data. Supabase handles authentication and storage; Vercel is planned for hosting. The selected Supabase project is in Ireland. Hostinger processes transactional emails and correspondence. Providers may use international subprocessors. Details of these activities and applicable safeguards are described in their contractual commitments and policies: Supabase, Vercel and Hostinger. Having a Supabase project in Ireland does not mean that all processing by service providers takes place within the European Union.
Data retention
Account data is retained while managing your preregistration and until the platform launches, you request deletion, or the project is abandoned. If launch is delayed, the need for retention is reviewed no later than twelve months after preregistrations open. Members will be informed about ongoing account retention at launch.
Replaced photos are removed from active storage after the new photo has been saved successfully. Unconfirmed accounts and orphaned files are reviewed regularly. Backups and technical logs follow each provider’s retention periods; deleting active storage does not immediately delete every backup. Data may be retained separately when required by law or to defend a legal right.
Cookies and tracking
Your language choice is stored for one year in a functional cookie. You can change it at any time using the FR/EN switch.
If you are signed in, this choice is also saved with your account for the language of service emails.
The public journal is accessible without an account. Articles and their images are public only when published with that audience by an authorised administrator. Sharing buttons open the service you choose at your request; no third-party social module loads automatically on the page.
Technical cookies keep you signed in. If you open an invitation link, a cookie stores its code for 30 days for your requested registration. The site has no third-party advertising or analytics tools. The invitation code is used only to attribute the requested registration and is not shared with advertising networks.
Your rights
Depending on the circumstances, you can request access, rectification, erasure, restriction or portability of your data, or object to certain processing. You can withdraw marketing consent in your settings. You can submit an account deletion request in your account settings.
You can contact the controller at the address above and lodge a complaint with the CNIL or the competent supervisory authority. We respond within one month, subject to extensions allowed in complex cases. Proportionate identity verification may be necessary.
Moving towards the platform
Your Supabase identity is retained so you do not need to create a new account at launch. Any extension of processing purposes or methods will require appropriate information.